We currently just ignore [security schemes](https://github.com/OAI/OpenAPI-Specification/blob/master/versions/3.0.2.md#securitySchemeObject). Let's change that.