This causes the class to miss 1 method and line in the code coverage report:

public function __construct(
private Security $security,
) {}

After changing it to a regular constructor, it does work, eg:

private Security $security;

public function __construct(
Security $security,
) {
$this->security = $security;
}