More tweaking.  I'd not have spotted that error with the auto-population
of the security session if I hadn't been fixing an error reported by javac/ant.