get rid of sealed field and rather use doPrivileged() for temporary elevation of privilege