After JDK-8344149 there are some vestiges of package access checking left in MarshalInputStream::checkSunClass. Removing this will require a bit of extra scrutiny. This is probably dead code, since RMIClassLoader is no longer throwing AccessControlException, which is the only case in which this method is called.