public static List<String> getIgnored(SecurityProperties security) {
   List<String> ignored = new ArrayList<String>(security.getIgnored());
   if (ignored.isEmpty()) {
     ignored.addAll(DEFAULT_IGNORED);
   } else if (ignored.contains("none")) {
     ignored.remove("none");
   }
   return ignored;
 }