Spring MVC project which denies access to resources unless explicitly marked as @Nonsensitive