I've got a configuration setup similar to the doc https://www.keycloak.org/docs/1.9/securing_apps_guide/topics/oidc/java/spring-boot-adapter.html Is there a way to ignore security on certain paths? Eg security: ignored: /foo/*