Review the import limitation of GroovyUpdaterClassLoader

GroovyUpdaterClassLoader has import black list in order to avoid file system access:

private static final String[] starImportsBlacklist =

{ "java.nio.file", "java.net", "javax.net", "javax.net.ssl", "java.lang.reflect" }

;

Also, it was assumed that the import black list checking is done only in the script level, not in the classes used in the script. I'd like to verify if this is true, too.