Based on my testing this is all that is needed for basic crypto functions to work under security manager. Using separate startup action so that it can be disabled by administrator if they so choose.