@Override
  public void updateMethodAuthorizer(Cache cache, boolean forceUpdate, String className,
      Set<String> parameters) throws QueryConfigurationServiceException {
    // Return quickly if security is disabled or deprecated flag is set
    if (isSecurityDisabled((InternalCache) cache) || ALLOW_UNTRUSTED_METHOD_INVOCATION) {
      return;
    }

    // Throw exception if there are CQs running and forceUpdate flag is false.
    CqService cqService = ((InternalCache) cache).getCqService();
    if ((!cqService.getAllCqs().isEmpty()) && (!forceUpdate)) {
      throw new QueryConfigurationServiceException(CONTINUOUS_QUERIES_RUNNING_MESSAGE);
    }

    try {
      if (className.equals(RestrictedMethodAuthorizer.class.getName())) {
        authorizer = new RestrictedMethodAuthorizer(cache);
      } else if (className.equals(UnrestrictedMethodAuthorizer.class.getName())) {
        authorizer = new UnrestrictedMethodAuthorizer(cache);
      } else if (className.equals(JavaBeanAccessorMethodAuthorizer.class.getName())) {
        authorizer = new JavaBeanAccessorMethodAuthorizer(cache, parameters);
      } else if (className.equals(RegExMethodAuthorizer.class.getName())) {
        authorizer = new RegExMethodAuthorizer(cache, parameters);
      } else {
        Class<?> userClass = ClassPathLoader.getLatest().forName(className);
        if (!Arrays.asList(userClass.getInterfaces()).contains(MethodInvocationAuthorizer.class)) {
          throw new QueryConfigurationServiceException(
              String.format(INTERFACE_NOT_IMPLEMENTED_MESSAGE, userClass.getName(),
                  MethodInvocationAuthorizer.class.getName()));
        }

        MethodInvocationAuthorizer tmpAuthorizer =
            (MethodInvocationAuthorizer) userClass.newInstance();
        tmpAuthorizer.initialize(cache, parameters);
        authorizer = tmpAuthorizer;
      }

      invalidateContinuousQueryCache(cqService);
    } catch (Exception e) {
      throw new QueryConfigurationServiceException(UPDATE_ERROR_MESSAGE, e);
    }
  }
Delete this once {@code ALLOW_UNTRUSTED_METHOD_INVOCATION} is removed.
Keeping it here and public to avoid using using the same constant String across classes.
geode-core/src/main/java/org/apache/geode/cache/query/internal/QueryConfigurationServiceImpl.java