Make WebMvcTypeExcludeFilter include WebSecurityConfigurer beans

[philwebb]

See #12238 for background. Adding configurer beans would seem sensible since we support mocked security.

[philwebb]

This is too risky for this late stage. We should revert.

[philwebb]

See also #6514