Major Description
We currently sometimes uses static SecurityUtil methods to perform doPrivileged calls and sometimes just go straight to the underlying methods. This should get cleaned up and instead of the SecurityUtil, we shall provide such methods via a plugable SecurityService.
This would allow us to implement a SimpleSecurityService which doesn't make use of the SecurityManager and therefore will increase the speed of OWB about 50% compared to always using the SecurityManager (which we currently do not do in hotspot areas because of the performance impact).