Users get the following pop-up repeatedly when launching a spectrum.jnlp file using OpenWebStart:
Spectrum OneClick JNLP trusted.cacerts (Access is denied) during operation 'load keystore' on Keystore C:\Users\<user>\.config\icedtea-web\security\trusted.cacerts
Grant read permissions to the trusted.cacerts file using an administrator account through the UI or via cli.
icacls "path\to\trusted.cacerts" /grant Users:R