What are the minimum security permissions required to be specified in a policy file, when using the java security manager turned on ?