...
Do not start the JVM with any agents enabled on an a production machine. This compliant solution eliminates removes the -agentlib command line argument and installs a security manager, as required by ENV02-J. Create a secure sandbox using a Security Manager.
...