Have you considered signing your JARs? It will cause a security-popup, but it’s a lot more stable (across JRE versions).
Signing makes things a lot easier but I think the number of people turned away by scary security dialog would be higher than the number of people who have issues running the unsigned version because of sandbox problems (assuming lots of testing on several different computers/operating systems).