Lookup adds module read link for unreflect on "caller sensitive" members. There should be more checks like

* declaring class is from an exported package
* unreflected member is indeed caller sensitive