Use security manager facility for reading properties
Merge remote-tracking branch 'dmlloyd/priv-action-cleanup'