TYRUS-380: setContextClassLoader is privileged action

- not marking it as one causes issues when using client in JNLP