I don't work with Java projects, but I just give it access to the basic binaries it needs, though I reserve some commands for myself.