The main thing that's not implementated is the AdminPermission
and the Bundle.hasPermission()

This requires some link with not yet written PermissionAdmin service.

Besides that, the main work is testing. I've done some tests, but not committed them.
They do work, but there's some issue with the VFS not initialising itself properly,
see the HACK at the top of OSGiTestDelegate. Without that hack you get
security errors when you try to use the VFS and it lazily inits itself.