The complete test suite needs to be runnable under a security manager, and a minimal permission set needs to be developed.