427068 ServletContext.getClassLoader should only check privileges if a SecurityManager exists