Applications that use JNI or FFM need to use the --enable-native-access flag, or include the Enable-Native-Access attribute in their JAR files. See JDK-8310626 (JEP 454: Foreign Function & Memory API) and JDK-8305968 (JEP draft - Integrity by Default)

When creating a CDS archive for applications that use the --enable-native-access flag, we should require that the same flag value to be specified between dump time and run time (or, trivially, if the flag is not specified during dump time, then it must not be specified during run time).

For precedence, see the handling of the --main-module command-line by CDS: JDK-8316969: Improve CDS module graph support for --module option