CHECKING by default and removed disabling of change of security manager
Patch allow use policy files in WildFly.

standalone.sh / domain.sh:
JAVA_OPTS="$JAVA_OPTS -Djboss.modules.policy-permissions=true"

policy file example:
grant codeBase "vfs:/content/JsmPolicyTestingAgent.war/-" {
	permission java.io.FilePermission "/etc/passwd","read";
};