Moved the Spring security passthrough markup for the Hystrix metrics endpoint to its own http element in securityContext.xml.