TsacertOptionTest.java depends on TimestampCheck.java and the latter references sun.security.tools.keytool.Main. Although TsacertOptionTest.java does not call a method of this internal class, compiling it needs a @modules line.