URLs returned by CryptoClassLoader decrypt their streams when opened