Question: Missing "Security Requirement Object"

[ichnoweb]

Describe the bug
I configured a OpenApiAuthenticationExtension class based on OAuth2 with Scopes. All information given there are present in the Schema. But I am missing the root security element, defined in the standard as "Security Requirement Object", with a list of defined scopes. Is it correct that it is not generated or am I doing something wrong?

Expected behavior
Having a root "Security Requirement Object"