Moved list of config keys not to be changed from ConfigBundle to security.php config file so that it can be locally customized