Investigate whether the following FilePermission in jdk/src/java.base/share/lib/security/default.policy is needed, and remove it if it is not:

grant codeBase "jrt:/jdk.charsets" {
    permission java.io.FilePermission "${java.home}/-", "read";
    ...
};