CDAP-478 Fix cdap-security-service dependencies

Can the exclusion done at the top level pom.xml?