bypass determination of protection domain when resource is not in a jar