System.setSecurityManager()
While often benign, any call to System.setSecurityManager() should be closely examined in any security audit.