The portfolio will be adding Jackson 3 support in the next generation and we should do the same for Spring Security

See gh-17832