Following OAI/OpenAPI-Specification/issues/3938, raise error on empty (as opposed to null) security requirements.