JDK-8207768 moved some property initialization that depends on the security properties file into Manifest.<clinit>, meaning that any jar file with a manifest will load the security properties eagerly. However, this property is only read if/when an exception occurs, so it can profitably be initialized lazily.