investigate whether the null check is necessary:

---------------------------------------------

javax.security.auth.kerberos.ServicePermission

    private static int getMask(String action) {

        if (action == null) {
            throw new NullPointerException("action can't be null");
        }

...

        if (action == null) {
            return mask;
        }