Switching to xml configuration of spring security to separate X509 api security from single-sign-on.