difficult to require authentication for all requests by default

[vsTianhao]

if

quarkus.http.auth.permission.default.paths=/*
quarkus.http.auth.permission.default.policy=authenticated

All security annotations (like jakarta.annotation.security.PermitAll) become meaningless.

I only have two options:

1. I don't write anything security-related in the configuration file.
2. I write hundreds of extremely long paths in quarkus.http.auth.permission.public.paths that cannot be shortened using wildcards.

[sberyozkin]

@vsTianhao Let me move to the Quarkus discussion