It's a similar story though, that could be covered by another capability - one to access the Java classloader, or run executables on the filesystem, for example.