I'm using Spring Boot (`1.3.0`) with Jersey (pom dependencies: `spring-boot-starter-jersey`, `spring-boot-starter-actuator`, `spring-boot-starter-web`, `spring-boot-starter-security`).

I have a Jersey endpoint (see below) which is really simple:

```
@Component
@Path("/helloworld")
public class HelloWorldResource {

    @GET
    public String home() {
        return "Hello World !";
    }
}

```

I have enabled Spring Boot Actuator by setting a particular path for Spring MVC url (`server.servlet-path=/system`), as explained in [Spring Boot guide](http://docs.spring.io/spring-boot/docs/current/reference/htmlsingle/#howto-use-actuator-with-jersey).  

Thanks to `spring-boot-starter-security`, Actuator endpoints are secured via basic authentification.

My problem here is that `/helloworld` is also secured, but I would like to leave it unsecured.

How can I do that ?

Thanks !