grant {
  permission javax.security.auth.AuthPermission  "createLoginContext";
  permission javax.security.auth.AuthPermission  "modifyPrincipals";
};