You only need the security manager if the classes
are not available in the client.
For configuring a security manager look at the javadocs
Thanks Adrian, which classes exactly? the client is in the same package as the bean, so it should have access to everything....