javafx/fxml/FXMLLoader.java is using internal sun.security.util.SecurityConstants. They should be replaced by creating the appropriate permission as specified, e.g.
   GET_CLASSLOADER_PERMISSION = new RuntimePermission("getClassLoader");