got the security policy to work with all levels of limitations. (only with jars though, Gson still creating a problem)