In order to write an effective API signature test for JCK, we must be able to reflect over the declared protected members of a class. That cannot be done with the methods available in JDK 1.1.x because Class.getDeclaredField() Class.getDeclaredMethod(), Class.getDeclaredConstructor(), and Class.getDeclaredClasses() throw security exceptions in security constrained environments.