I would suggest using /etc/java instead for policy reasons, but the rest stands. I do however think it is easier to just create a symlink in the JRE_HOME from .systemPrefs to /etc/java/systemPrefs and give root write access.