When a cache is starting and it has security, it is possible that an internal component would throw an exception stating it doesn't have security access. Normally this is fixed by surrounding this in a SecurityActions call. However when a cache is starting all of these components are known to be Infinispan core and should be fine trusting it. This JIRA is to wrap start automatically with SecurityActions.