diff --git a/elasticsearch/x-pack/src/main/plugin-metadata/plugin-security.policy b/elasticsearch/x-pack/src/main/plugin-metadata/plugin-security.policy
index 253b8391b3f..d3e821f4858 100644
--- a/elasticsearch/x-pack/src/main/plugin-metadata/plugin-security.policy
+++ b/elasticsearch/x-pack/src/main/plugin-metadata/plugin-security.policy
@@ -11,6 +11,7 @@ grant {
   // to load the class with the application class loader
   permission java.lang.RuntimePermission "setContextClassLoader";
   permission java.lang.RuntimePermission "getClassLoader";
+  // TODO: remove use of this jar as soon as possible!!!!
   permission java.lang.RuntimePermission "accessClassInPackage.com.sun.activation.registries";
 
   // bouncy castle