Why did com.sun.org.apache.xml.internal.resolver.* get added to list of restricted packages?

[Mathiske, Bernd]

Is there any particular reason why these additional entries can be found in “java.security” in u141 as opposed to say u131?

package.access=sun.,\
             ...
com.sun.org.apache.xml.internal.resolver.helpers.,\
             com.sun.org.apache.xml.internal.resolver.readers.,\
             ...

package.definition=sun.,\
             ...
com.sun.org.apache.xml.internal.resolver.helpers.,\
             com.sun.org.apache.xml.internal.resolver.readers.,\
             ...

Is this just forced API sanity cleanup or is there a more severe reason?

Bernd