Map<String, String> confMap = Config.getConfigMap();
ConfigObject c = Config.getConfig().getObject("security.protected");
ConfigValue apiSec = Config.getConfig().getValue("security.api");
boolean enableRestFilter = apiSec != null && "enabled".equals(apiSec.unwrapped());
for (String key : c.keySet()) {
ConfigValue cv = c.get(key);
ArrayList<String> patterns = new ArrayList<String>();
ArrayList<String> roles = new ArrayList<String>();
// if API security is disabled don't add any API related patterns