Return copy of String array rather than returning internal String array

Findbugs correctly complains that returning the internal String array exposes
internal implementation to callers.