title: How does one run Java 8's nashorn under a SecurityManager
body: <p>I am looking to sandbox Java 8's Nashorn javascript engine. I've already discovered the --no-java flag, which helps, but I've also found the following link saying that one needs to be "running with SecurityManager enabled": <a href="http://mail.openjdk.java.net/pipermail/nashorn-dev/2013-September/002010.html" rel="nofollow">http://mail.openjdk.java.net/pipermail/nashorn-dev/2013-September/002010.html</a></p>
  
  <p>I haven't found documentation addressing how this is done with Nashorn, so how should this be done safely?</p>