...
This compliant solution moves the call to System.loadLibrary() outside the doPrivileged() block. That allows unprivileged code to perform preliminary password-reset checks using the file but forbids prevents it from loading the authentication library.
...
The loadLibrary() invocation could also occur before performing preliminary password-reset checks, however, ; in this case it is deferred for performance reasons.
...