Subject.doAs[Privileged] with a null subject results in creating a new AccessControlContext with a SubjectDomainCombiner with a null subject. This is inefficient, it would be better to just create a new AccessControlContext with a null domain combiner.