safely navigate the config in case spring security isn't installed