java security : accepting now classes from any "scripting" subpackage