Approaching Java Security API