SEC-2468: JdbcUserDetailsManager#createNewAuthentication uses null credentials