MODULES-188 getClassLoader() needs to be in doPrivileged block in ModularPermissionFactory