Problematic are the calls that are originating in the unprivileged user code. For example:

org.infinispan.distribution.group.GroupManagerImpl.GroupMetadataImpl#getGroup
org.infinispan.distribution.group.GroupManagerImpl#createGroupMetadata

e.g. call stacks
https://gist.github.com/rhusar/e2ae371f852d926c5e13
https://gist.github.com/rhusar/7411f9dc963bc9233eae
https://gist.github.com/rhusar/782743a551c8eef927a0 (security)