Webstart and applets support. JCL is able to derive ProtectionDomain from parent protection domain.