Hopefully a simple question...
Tried to disable security manager according to the javadoc in the Security class.
Tried setting env variables using ES_JAVA_OPTS with or without the es prefix.
Tried configuring in elasticsearch.yml.
I also see a command line option '--security.manager.enabled'.
Note that I am running ES using the 5.1.1 docker image.