Currently, native access is permitted for JDK modules load by the bootstrap and platform ClassLoaders. This appears to be a too restricted approach - some modules (like jdk.internal.le) currently from the application ClassLoader may need the ability to invoke FFM, and possible some modules from the boo/platform ClassLoaders may not need the ability.

It would be better if the list of modules that are permitted to do native access was specified explicitly.