private synchronized static void loadSecurityProperties() {
        
        if (securityProperties == null) {
            // If home is null then log that the application will not work correctly
            if (home == null) {
                if (!failedLoading) {
                    failedLoading = true;
                    System.err.println("Critical Error! The home directory has not been configured, \n" +
                        "which will prevent the application from working correctly.\n\n");
                }
            }
            // Create a manager with the full path to the security XML file.
            else {
                try {
                    securityProperties = new XMLProperties(home.resolve(JIVE_SECURITY_FILENAME));
                    setupPropertyEncryption();

                    // Migrate all secure XML properties into the database automatically
                    for (String propertyName : securityProperties.getAllPropertyNames()) {
                        if (!propertyName.startsWith(ENCRYPTED_PROPERTY_NAME_PREFIX)) {
                            setPropertyEncrypted(propertyName, true);
                            securityProperties.migrateProperty(propertyName);
                        }
                    }
                }
                catch (IOException ioe) {
                    Log.error("Unable to load default security properties from: {}{}{}", home, File.separator, getConfigName(), ioe);
                    failedLoading = true;
                }
            }
            // create a default/empty XML properties set (helpful for unit testing)
            if (securityProperties == null) {
                try {
                    Log.warn("Security properties have not been loaded from file. Using a non-persisting dummy properties object.");
                    securityProperties = XMLProperties.getNonPersistedInstance();
                } catch (IOException e) {
                    Log.error("Failed to setup default security properties", e);
                }            	
            }
        }
    }
Lazy-loads the security configuration properties.
xmppserver/src/main/java/org/jivesoftware/util/JiveGlobals.java