title: Why spring security config shouldn't be used directly in applications?
body: <p>Why the description on <a href="https://docs.spring.io/spring-security/site/docs/5.0.4.RELEASE/api/org/springframework/security/config/package-summary.html" rel="nofollow noreferrer">org.springframework.security.config</a> say that "None of the code in these packages should be used directly in applications." ?</p>
  
  <p>On <a href="http://www.baeldung.com/spring-security-with-maven" rel="nofollow noreferrer">(baeldung)spring-security-with-maven</a> they say to use 
  `</p>
  
  <pre><code>&lt;dependency&gt;
      &lt;groupId&gt;org.springframework.security&lt;/groupId&gt;
      &lt;artifactId&gt;spring-security-config&lt;/artifactId&gt;
      &lt;version&gt;${org.springframework.security.version}&lt;/version&gt;
      **&lt;scope&gt;runtime&lt;/scope&gt;**
  &lt;/dependency&gt;
  </code></pre>
  
  <p>`</p>
  
  <p>But in my app I need compile scope... </p>