I will say it again: please, reconsider JEP411. SecurityManager helps:

https://xeraa.net/blog/2021_mitigate-log4j2-log4shell-elasti...