I am using cbsecurity. If I install with commandbox, cbauth always loads another coldbox. I tried with --production and cbauth by itself.
CommandBox:Admin6> list
Dependency Hierarchy for HUA Admin (3.1.0)
├── cbstorages (2.4.0+64)
├── cbmessagebox (3.2.1+49)
├── cbdebugger (2.2.0+45)
├─┬ coldbox (6.2.1+1388)
│ ├── commandbox-docbox ()
│ ├── commandbox-cfformat ()
│ ├── commandbox-cfconfig ()
│ ├── commandbox-dotenv ()
│ └── testbox ()
├─┬ cbsecurity (2.9.0+148)
│ ├─┬ jwt-cfml (1.1.0)
│ │ └── testbox ()
│ ├─┬ cbcsrf (2.1.0+38)
│ │ └── cbstorages ()
│ └─┬ cbauth (5.0.3)
│ ├── cbstorages ()
│ ├─┬ coldbox (6.0.0+1296)
│ │ └── testbox ()
│ └── testbox ()
└─┬ BCrypt (3.0.1+34)
└── cbjavaloader (2.0.0+49)