When installing the app with flex we are not able to override security.yaml file which breaks compiling the container. ezpublish_rest.controller.session has a dependency on ezpublish_rest.session_authenticator which isn't created unless ezpublish_rest_session is configured for a firewall.