quarkus: OpenAPI generation: `@RolesAllowed` roles are sometimes missing (random behavior)

Describe the bug

We have OIDC security provider with RESTEasy Classic and our endpoint /secured/admin is annotated with @RolesAllowed("admin"). Sometimes, generated security scheme is empty (once in a few days, you can see our CI). Interestingly, we have identical endpoint with RESTEasy Reactive and this problem occasionally occur too.

Expected behavior

OpenAPI definition must be deterministic (and ideally with roles).

Actual behavior

Most of the times, we get "/secured/admin":{"get":{"tags":["Secured Resource"],"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"type":"string"}}}},"403":{"description":"Not Allowed"},"401":{"description":"Not Authorized"}},"security":[{"SecurityScheme":["admin"]}]}}, but sometimes we get "/secured/admin":{"get":{"tags":["Secured Resource"],"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"type":"string"}}}},"403":{"description":"Not Allowed"},"401":{"description":"Not Authorized"}},"security":[{"SecurityScheme":[]}]}}

How to Reproduce?

Steps to reproduce:

1. git clone git@github.com:michalvavrik/quarkus-test-suite.git
2. cd quarkus-test-suite && git checkout reproducer/openapi-definition-generation
3. cd security/keycloak-oidc-client-extended/
4. mvn clean verify -Dit.test=OpenApiStoreSchemaIT (repeat till you experience failure, good luck)

Please checkout daily builds of our CI for failures we experienced https://github.com/quarkus-qe/quarkus-test-suite/actions/workflows/daily.yaml, notably build #770.

Output of uname -a or ver

Linux

Output of java -version

openjdk 17.0.4 2022-07-19

GraalVM version (if different from Java)

OpenJDK Runtime Environment GraalVM CE 23.2

Quarkus version or git rev

999-SNAPSHOT

Build tool (ie. output of mvnw --version or gradlew --version)

Apache Maven 3.8.6

Additional information

No response