Use `{placeholder}` instead of `${placeholder}`

[rwinch]

This more closely aligns with Spring Security's method support https://docs.spring.io/spring-security/reference/servlet/authorization/method-security.html#_templating_meta_annotation_expressions