CWS: read available localizations only at startup.

This avoids many file system read operations, that could (in theory)
be a DOS attack vector.