Now that there will be no "AU_OFF" builds for JDK8, we need to document a way for users to achieve the same functionality using an AU build. The process includes disabling AU via the installer, and disabling expiration checking via deployment. The former is should be already documented, however it is not obvious that the latter will also be required (this issue was raised during the feature TOI to Sustaining).

7u40 Relnotes contain this information:

"Option to disable the "JRE out of date" warning

Starting from 7u40, a new deployment property deployment.expiration.check.enabled is available. This property can be used to disable the "JRE out of date" warning.

When the installed JRE (7u10 or later), falls below the security baseline or passes it's built-in expiration date, an additional warning is shown to users to update their installed JRE to the latest version. For businesses that manage the update process centrally, users attempting to update their JRE individually, may cause problems.

To suppress this specific warning message, add the following entry in the deployment properties file:
deployment.expiration.check.enabled=false

For more information, see Deployment Configuration File and Properties."

The info above needs to be combined with the info for disabling auto update in the 8u20 product documentation.