title: Disable Spring Boot AutoConfiguration for transitive dependencies
body: <p>I've created a Spring Boot project for mocking soap services - it has a dependency on         <code>org.springframework.ws:spring-ws-security</code> for handling ws-sec headers, which introduces a  transitive dependency on <code>org.springframework.security:spring-security-core</code></p>
  
  <p>Having this on my runtime classpath causes Spring Boot to think I want web security enabled, and even if I disable it with <code>security.basic.enabled = false</code> I end up getting a runtime ClassNotFound exception unless I also add:</p>
  
  <pre><code>compile("org.springframework.security:spring-security-web:$springSecurityVersion")
  compile("org.springframework.security:spring-security-config:$springSecurityVersion")
  </code></pre>
  
  <p>to my runtime classpath. Is there any way to indicate to Boot that, although it's on the classpath at runtime, that I truly want nothing to do with Spring Security, and to cause it to not require these additional dependencies?</p>