@philbaxter thanks merged in :)

sun imports should be marked optional
As per the title. sun.security.util and sun.security.x509 should be marked as optional in the manifest.

pom.xml
pom.xml
diff --git a/pom.xml b/pom.xml
index 7b742b346a4..a215f129fb8 100644
--- a/pom.xml
+++ b/pom.xml
@@ -766,7 +766,7 @@
               <instructions>
                 <Export-Package>${project.groupId}.*</Export-Package>
                 <!-- enforce JVM vendor package as optional -->
-                <Import-Package>sun.misc.*;resolution:=optional,sun.nio.ch;resolution:=optional,*</Import-Package>
+                <Import-Package>sun.misc.*;resolution:=optional,sun.nio.ch;resolution:=optional,sun.security.*;resolution:=optional,*</Import-Package>
                 <!-- override "internal" private package convention -->
                 <Private-Package>!*</Private-Package>
               </instructions>
