Extract actuator security into separate classes

So spring-security + a web app is secure by default
(you don't need the actuator).

spring-boot-cli/src/test/resources/repro-samples/secure.groovy

@@ -3,12 +3,12 @@ package org.test
 // No security features added just a test that the dependencies are resolved
 @Grab("spring-boot-starter-security")
 
-@RestController
-class SampleController {
+@Controller
+class Sample implements CommandLineRunner {
 
-	@RequestMapping("/")
-	public def hello() {
-		[message: "Hello World"]
+	@Override
+	void run(String... args) {
+		println "Hello World"
 	}
 }