The threadLists variable of sun.security.jca.Providers class is InheritableThreadLocal and is used for supplying the temporary special provider list during signed jar verification. As there are no child threads created/needed by the jar verification and that there are no code managing/removing the inherited ThreadLocal value, sun.security.jca.Providers.threadLists should just use ThreadLocal.