Permissions.createPermission(String name, String action, Class target) Fails for action == null

java.security.Permission has a single constructor, Permission(String name). While many subclasses add another constructor with sig (String name, String actions), this is not a requirement for Permission subclasses and custom permissions without the actions arg are not properly handled by createPermission().