Why does JBoss EAP 5.1.2 fail to start with common criteria security policy enabled?

Issue

• Why does JBoss EAP 5.1.2 fail to start with common criteria security policy enabled? It fails with the following log message:

Could not load Logmanager "org.jboss.logmanager.LogManager"
java.security.AccessControlException: access denied (java.lang.RuntimePermission setContextClassLoader)
    at java.security.AccessControlContext.checkPermission(AccessControlContext.java:374)
    at java.security.AccessController.checkPermission(AccessController.java:546)
    at java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
    at java.lang.Thread.setContextClassLoader(Thread.java:1394)
    at java.util.logging.LogManager$Cleaner.<init>(LogManager.java:205)
    at java.util.logging.LogManager$Cleaner.<init>(LogManager.java:199)
    at java.util.logging.LogManager.<init>(LogManager.java:236)
    at org.jboss.logmanager.LogManager.<init>(LogManager.java:50)
    at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
    at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:39)
    at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:27)
    at java.lang.reflect.Constructor.newInstance(Constructor.java:513)
    at java.lang.Class.newInstance0(Class.java:355)
    at java.lang.Class.newInstance(Class.java:308)
    at java.util.logging.LogManager$1.run(LogManager.java:168)
    at java.security.AccessController.doPrivileged(Native Method)
    at java.util.logging.LogManager.<clinit>(LogManager.java:157)
    at java.util.logging.Logger.getLogger(Logger.java:287)
    at com.sun.jmx.remote.util.ClassLogger.<init>(ClassLogger.java:37)
    at javax.management.NotificationBroadcasterSupport.<clinit>(NotificationBroadcasterSupport.java:335)
    at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
    at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:39)
    at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:27)
    at java.lang.reflect.Constructor.newInstance(Constructor.java:513)
    at java.lang.Class.newInstance0(Class.java:355)
    at java.lang.Class.newInstance(Class.java:308)
    at org.jboss.bootstrap.ServerLoader.createServer(ServerLoader.java:378)
    at org.jboss.bootstrap.ServerLoader.load(ServerLoader.java:336)
    at org.jboss.Main.boot(Main.java:215)
    at org.jboss.Main$1.run(Main.java:556)
    at java.lang.Thread.run(Thread.java:662)
Failed to boot JBoss:
java.security.AccessControlException: access denied (java.lang.RuntimePermission getClassLoader)
    at java.security.AccessControlContext.checkPermission(AccessControlContext.java:374)
    at java.security.AccessController.checkPermission(AccessController.java:546)
    at java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
    at java.lang.Thread.getContextClassLoader(Thread.java:1364)
    at org.jboss.bootstrap.AbstractServerImpl.init(AbstractServerImpl.java:168)
    at org.jboss.bootstrap.AbstractServerImpl.init(AbstractServerImpl.java:143)
    at org.jboss.Main.boot(Main.java:218)
    at org.jboss.Main$1.run(Main.java:556)
    at java.lang.Thread.run(Thread.java:662)