JCR-2834: Make DefaultSecurityManager the default security manager (instead of SimpleSecurityManager)