We are using gwt 2.8.2 on the client side so the startup uses something like:
... -server com.google.appengine.tools.development.gwt.AppEngineLauncher
... -javaagent:appengine-java-sdk-1.9.59\lib\agent\appengine-agent.jar
My guess is that the tools in the new Java8 App Engine SDK are not yet ready for Java8?
Looks like the SecurityManager is still used when using the AppEngineLauncher / appengine-agent