src/java.base/share/classes/javax/security/auth/Subject.java

@@ -434,11 +434,11 @@
      public static <T> T callAs(final Subject subject,
              final Callable<T> action) throws CompletionException {
          Objects.requireNonNull(action);
          if (!SharedSecrets.getJavaLangAccess().allowSecurityManager()) {
              try {
-                 return ScopedValue.callWhere(SCOPED_SUBJECT, subject, action);
+                 return ScopedValue.callWhere(SCOPED_SUBJECT, subject, action::call);
              } catch (Exception e) {
                  throw new CompletionException(e);
              }
          } else {
              try {