The java.security file contains some content that is only applicable to Oracle's JDK. This content is getting pushed back to OpenJDK and thus polluting the source with Oracle specific data. So far, the content is limited to one or two packages in the package.access and package.definition properties and the ucrypto provider. We need to somehow keep this data in the closed repo only.