So, findModule should do the work in a privileged block; to avoid exploit, the FilePermissions for each repository root should be checked during construction.