javax.security.auth.login.Configuration has two methods,
getAppConfigurationEntry, and refresh,
which current throw IOException.

they should be consistent with java.security.Policy,
and javax.security.auth.Policy, which do not throw the IOException.