add "auto" manifest for security
when "auto" manifest use startup jnlp as a fallback for jars config