https://foojay.io/today/java-security-log4j-the-securitymanager-and-funding/