The actual result:
At step7, The Security pop-up is not modal and try to click browser window - popup can be hided.Please refer to modal.png.

We can still reproduce the issue according to Stephen's test instruction and test url. We used oel7.1-RedHat-x64 and these versions of Java:7u131-b11, 7u141-b06, 7u141-b07, and the security dialog was not modal to the browser. Please refer to 'fail.png'.