You may override the Network Server's impulse to install a security manager if, for some reason, you need to run your application outside Java's security protections.
Use the -noSecurityManager option to force the Network Server to come up without a security manager. E.g.:
java org.apache.derby.drda.NetworkServerControl start -h localhost -noSecurityManager