Approaching the Java security API