See https://github.com/spring-projects/spring-security/pull/8996#discussion_r506652742 and https://github.com/spring-projects/spring-security/pull/8996#pullrequestreview-528354323
See #8996 (comment) and #8996 (review)