Webstart and signing your jar files

If you’re making a game that at the most will save the current game state somewhere (haven’t crossed that bridge yet), do you still need to set “all-permissions” in your jnlp file?

Can you bypass the whole signing part if “all-permissions” are not set? What would go in it’s place?