...
[API 2006] Class SecurityManager, Class AccessControlContext, Class AccessController
[Gong 2003] Section 6.1, Security Manager
[Pistoia 2004] Section 7.4, The Security Manager
[Policy 2002][SecuritySpec 2008] 6.2 SecurityManager versus AccessController
...
ENV01-J. Place all privileged code in a single package and seal the package