AccessControlContext.optimize is missing some important optimizations, in that it fails to take advantage of the fact that the protection domains in a privileged or inherited context have already been compressed and therefore don't need to be recompressed. There is also complete duplication of code for combining the stack context with a privileged context and combining the stack context with the inherited context, even though the two code paths do the same thing.