The all permission check ensures that the security policy used during bootstrap does not grant the java.security.AllPermission to Elasticsearch. Running with the all permission granted is equivalent to disabling the security manager.