Cannot change application permissions on EAP 6 when the Java Security Manager is enabled

All deployed applications are granted "AllPermission" and there does not appear to be a way to change this.

Changing the grant statements in the policy file (-Djava.security.policy) doesn't seem to affect the permissions.