migrate to SecureClassLoader for UDF with ProtectionDomain