The OpenJDK JVM : Securing a moving target or What could possibly go wrong?