authEnabled=false always leads to 401

Up to now, editing etc/org.opendaylight.aaa.authn.cfg file to contain authEnabled=false has lead to every request to be considered authorized.
But in current Beryllium snapshots, the same edit leads to every request to be considered NOT authorized.

This is either a regression in functionality, or a new feature which misses documentation (AAA-84).

Steps to reproduce:
0. Start ODL.
1. feature:install odl-restconf
2. curl -v 127.0.0.1:8181/restconf/modules

It does not matter whether the edit was done just before step 2 or any other time before.
It does not matter which restconf URI is used.
When the line is edited to authEnabled=true at runtime, requests with correct credentials (admin:admin by default) work.

Another reproduction, in Sandbox: https://jenkins.opendaylight.org/releng/job/aaa-csit-verify-1node-authn/10/robot/report/log.html#s1-s1-t6-k2-k11-k4