java/net/httpclient/** test failures with java.security.AccessControlException: access denied ("java.net.URLPermission"

a number of tests run externally on macOS 11.7.2 failed with SecurityException

similar to test HttpClientLocalAddrTest.testMultiSendRequests(HttpClientLocalAddrTest$ClientProvider$ClientBuilder@5ff4b1da, https://127.0.0.1:56837/, /0.0.0.0): failure
java.util.concurrent.ExecutionException: java.lang.SecurityException: access denied ("java.net.URLPermission" "https://127.0.0.1:56837/" "GET:")
at java.base/java.util.concurrent.FutureTask.report(FutureTask.java:122)
at java.base/java.util.concurrent.FutureTask.get(FutureTask.java:191)
at HttpClientLocalAddrTest.testMultiSendRequests(HttpClientLocalAddrTest.java:415)
at java.base/jdk.internal.reflect.DirectMethodHandleAccessor.invoke(DirectMethodHandleAccessor.java:103)
at java.base/java.lang.reflect.Method.invoke(Method.java:580)
at org.testng.internal.MethodInvocationHelper.invokeMethod(MethodInvocationHelper.java:132)
at org.testng.internal.TestInvoker.invokeMethod(TestInvoker.java:599)
at org.testng.internal.TestInvoker.invokeTestMethod(TestInvoker.java:174)
at org.testng.internal.MethodRunner.runInSequence(MethodRunner.java:46)
at org.testng.internal.TestInvoker$MethodInvocationAgent.invoke(TestInvoker.java:822)
at org.testng.internal.TestInvoker.invokeTestMethods(TestInvoker.java:147)
at org.testng.internal.TestMethodWorker.invokeTestMethods(TestMethodWorker.java:146)
at org.testng.internal.TestMethodWorker.run(TestMethodWorker.java:128)

test run as root could be an issue