The Microsoft VM applies security checks to J/Direct methods at three different times:
An attempted J/Direct call takes place only if each of the three security checks passes or is explicitly disabled.