As noted in JDK-8155207 and elsewhere, one of the outstanding items for java.lang.instrument is whether the new ClassFileTransformer transform method should provider the ClassLoader parameter. After further consideration then this seems useful and avoids agents needing permissions to invoke Module::getClassLoader.