https://foojay.io/today/jep-411-what-it-means-for-javas-security-model/