Infinispan uses system properties for out-of-band settings that weren't deemed important enough to have a proper configuration attribute:

• infinispan.arrays.debug
• infinispan.unsafe.force_multicast
• infinispan.compat (obsolete?)
• infinispan.debugDependencies
• infinispan.stagger.delay (introduced with ISPN-825)
• org.infinispan.query.indexmanager.LockAcquiringBackend.MAX_QUEUE_SIZE

We should use a SecurityActions class to access these properties instead of Boolean.getBoolean() and Integer.getInteger(). We should also document these system properties, and evaluate moving them to the proper configuration.