The JSSE-based secure RMI transport provider expects public
credentials that are a java.security.cert.Certificate array
representing the associated certificate chain. Because arrays are
mutable, this arrangement allows applications with access to the
subject, and no additional permissions, to modify the public
credentials of the subject, even if the subject is read-only.