"security-context-explicit-save" has bean defaulted to true with gh-11762, but spring-security-6.0.xsd was not updated.