Java Security

hi, it seems that signed applets
verifiable with cacerts get full
permission overriding permissions given in {user.home}/.java.policy?
also the deny option in the security window
doesnt seem to work. i am working in linux
and use netscape4.7X.
cud anyone clarify?