See https://github.com/spring-projects/spring-security/pull/8996#discussion_r506652742 and https://github.com/spring-projects/spring-security/pull/8996#pullrequestreview-528354323