(Digression for Janne and the dev team: any time we do things like file access, we need to bracket the code with a doPrivileged() block so that we don't have to grant file I/O privileges to the container... this is one of the big complicating factors that is preventing a full enumeration of privileges at the moment...)
This sounds insane to me. It complicates everything, and what would we gain by doing it?
/Janne
