JAXP tests override with its test policy and grant with minimal permissions. Some JAXP tests may load extended charsets. Once jdk.charsets is deprivileged, permissions will be granted in the default security policy. JAXP tests should extend the default security policy. Another option is to augment TestPolicy to grant permissions for specific modules that the tests will load.