- Enable the feature by remove the use of SignedAsBLOBJarVerifier.ENABLE flag. - Submit the change as described here for review by security team: http://j2se.sfbay.sun.com/web/bin/view/Deployment/SignJarAsBLOB - Add more unit tests if possible, particularly cases of .JARJAR archives.