[MODULES-174] Avoid permission check when constructing JAR URLs