Java Security Architecture Revisited