Securing the JVM, neither for fun nor for profit, but do you really have a choice?