...
The permission ReflectPermission with action suppressAccessChecks should also not be granted so that the security manager blocks attempts to access private fields of other classes. (See ENV32ENV04-J. Do not grant ReflectPermission with target suppressAccessChecks)
...