Add tests to check protection domains are created with right permissions. This would be a applet test invoked from different places like current code base, signed Jar, different code base and signed jar at different code base.