security flags in jnlp and jar manifest