self-contained jar-based file security