Use the default java security policy if no security provider is present and don't check for allpermission if an extension bundle is installed and there is no security manager present. (FELIX-3961,FELIX-3950)
felix/trunk/framework/src/main/java/org/apache/felix/framework/BundleProtectionDomain.java