Allow for strict state of jar utility (verify file presence)

Also, this improves the ability to catch priv-app. Somewhere recently
we stopped reliably handling that correctly.

closes #238