I have an authenticator class which extends AbstractLoginFormAuthenticator and I declared it with the security.firewalls.main.custom_authenticator setting.
However, I omitted to set the security.enable_authenticator_manager setting - but everything works just as expected with no extra deprecations etc. I guess that when enable_authenticator_manager is not set it defaults to false, but the authenticator class is used anyway. What's the purpose of this setting?