Writing and working with Security Managers

So I'm thinking of designing and implementing my first java security manager for a project I'm working on, I was wondering if anyone has any tips or links for working with security managers and writing them.  Have any you guys or girls written one before?  Experiences?  Things to avoid?