Questions - java-security