Why is @EnableWebSecurity class being instantiated on a Spring application startup?

Question

I have a class decorated with @EnableWebSecurity this class has a session-scoped bean injected into it using @Inject annotation.

Which, as e