Running the TCK with a security manager enabled showed that we're missing do-privileged blocks at the following place(s):