Security subsystem doesn't allow for the configuration of JASPI auth-module flag

AS7 security configuration doesn't allow for the specification of the JASPI auth modules control flag. As a result, PicketBox assumes all modules are REQUIRED and the subsystem doesn't offer users a way to change that.