Intermittent authentication failure

[edewata]

Sometimes the client authentication fails due to AccessControlException:
https://github.com/edewata/pki/actions/runs/8088609810/job/22103219206#step:29:35

Feb 29 00:00:06 pki.example.com server[3890]: SEVERE: ProxyRealm: Unable to authenticate CN=Administrator: access denied ("java.io.FilePermission" "/var/lib/pki/pki-tomcat/logs/ca" "read")
Feb 29 00:00:06 pki.example.com server[3890]: java.security.AccessControlException: access denied ("java.io.FilePermission" "/var/lib/pki/pki-tomcat/logs/ca" "read")
Feb 29 00:00:06 pki.example.com server[3890]:         at java.base/java.security.AccessControlContext.checkPermission(AccessControlContext.java:485)
Feb 29 00:00:06 pki.example.com server[3890]:         at java.base/java.security.AccessController.checkPermission(AccessController.java:1068)
Feb 29 00:00:06 pki.example.com server[3890]:         at java.base/java.lang.SecurityManager.checkPermission(SecurityManager.java:416)
Feb 29 00:00:06 pki.example.com server[3890]:         at java.base/java.lang.SecurityManager.checkRead(SecurityManager.java:756)
Feb 29 00:00:06 pki.example.com server[3890]:         at java.base/java.io.File.exists(File.java:829)
Feb 29 00:00:06 pki.example.com server[3890]:         at java.base/java.io.File.mkdirs(File.java:1403)
Feb 29 00:00:06 pki.example.com server[3890]:         at org.apache.juli.FileHandler.openWriter(FileHandler.java:428)
Feb 29 00:00:06 pki.example.com server[3890]:         at org.apache.juli.FileHandler.publish(FileHandler.java:220)
Feb 29 00:00:06 pki.example.com server[3890]:         at java.logging/java.util.logging.Logger.log(Logger.java:980)
Feb 29 00:00:06 pki.example.com server[3890]:         at org.slf4j.impl.JDK14LoggerAdapter.log(JDK14LoggerAdapter.java:582)
Feb 29 00:00:06 pki.example.com server[3890]:         at org.slf4j.impl.JDK14LoggerAdapter.info(JDK14LoggerAdapter.java:277)
Feb 29 00:00:06 pki.example.com server[3890]:         at com.netscape.cms.realm.PKIRealm.authenticate(PKIRealm.java:112)
Feb 29 00:00:06 pki.example.com server[3890]:         at com.netscape.cms.tomcat.ProxyRealm.authenticate(ProxyRealm.java:152)
Feb 29 00:00:06 pki.example.com server[3890]:         at org.apache.catalina.authenticator.SSLAuthenticator.doAuthenticate(SSLAuthenticator.java:91)
Feb 29 00:00:06 pki.example.com server[3890]:         at org.apache.catalina.authenticator.AuthenticatorBase.authenticate(AuthenticatorBase.java:665)
Feb 29 00:00:06 pki.example.com server[3890]:         at com.netscape.cms.tomcat.SSLAuthenticatorWithFallback.doSubAuthenticate(SSLAuthenticatorWithFallback.java:37)
Feb 29 00:00:06 pki.example.com server[3890]:         at com.netscape.cms.tomcat.AbstractPKIAuthenticator.doAuthenticate(AbstractPKIAuthenticator.java:93)
Feb 29 00:00:06 pki.example.com server[3890]:         at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:562)
Feb 29 00:00:06 pki.example.com server[3890]:         at com.netscape.cms.tomcat.ExternalAuthenticationValve.invoke(ExternalAuthenticationValve.java:83)
Feb 29 00:00:06 pki.example.com server[3890]:         at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:130)
Feb 29 00:00:06 pki.example.com server[3890]:         at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:93)
Feb 29 00:00:06 pki.example.com server[3890]:         at org.apache.catalina.valves.rewrite.RewriteValve.invoke(RewriteValve.java:545)
Feb 29 00:00:06 pki.example.com server[3890]:         at org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:670)
Feb 29 00:00:06 pki.example.com server[3890]:         at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:74)
Feb 29 00:00:06 pki.example.com server[3890]:         at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:342)
Feb 29 00:00:06 pki.example.com server[3890]:         at org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:390)
Feb 29 00:00:06 pki.example.com server[3890]:         at org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:63)
Feb 29 00:00:06 pki.example.com server[3890]:         at org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:928)
Feb 29 00:00:06 pki.example.com server[3890]:         at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1794)
Feb 29 00:00:06 pki.example.com server[3890]:         at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:52)
Feb 29 00:00:06 pki.example.com server[3890]:         at org.apache.tomcat.util.threads.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1191)
Feb 29 00:00:06 pki.example.com server[3890]:         at org.apache.tomcat.util.threads.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:659)
Feb 29 00:00:06 pki.example.com server[3890]:         at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
Feb 29 00:00:06 pki.example.com server[3890]:         at java.base/java.lang.Thread.run(Thread.java:840)