>>>>> "Mark" == Mark Wielaard <mark@xxxxxxxxx> writes: Mark> In that case it seems we don't need a keyword or meta-bug but just a new Mark> 'security' component covering java.security.* (Permissions, Policies, Mark> SecurityManager)? As I recall the discussion was about security as cross-cutting concern -- not exactly (or just) java.security but also security issues anywhere in the library. Tom