some javas don't like having null security managers