this file contains a lot of unused things, right? like sonata that is not present... imho we should reduce this to the minimum.

i wonder why we even need security at all? my original idea with the publish workflow was that it *can* be integrated into security, but it should not require it. could you open an issue on corebundle explaining why things did not work without security? or maybe its just an issue of configuring things the right way in corebundle?