svoid replaceACCInClassLoader(O o, AccessControlContext newACC) {
  ClassLoader cl = getClassLoader(o);
  if (cl instanceof URLClassLoader) pcall {
    setOpt(cl, acc := newACC);
    setOpt(getOpt(cl, 'ucp), acc := newACC); 
  }
}