Add missing privileged actions around calls to secured static methods

Without this undertow fails under a security manager (affects TCK)