HHH-8076 javax.security and javax.validation should be optional in OSGi
manifest