The following methods should be respecified to not throw SecurityException and any text about the Security Manager should be removed:

- CardTerminal.connect(String)
- Card.getBasicChannel()
- Card.openLogicalChannel()
- Card.beginExclusive()
- Card.endExclusive()
- Card.transmitControlCommand(int, byte[])
- Card.disconnect(boolean)

The CardPermission class should be deprecated for removal.

The SmartCardIO API is defined by JSR 268, so this will require a maintenance revision of the JSR. See also JDK-8251202 for other potential spec changes.