- AssetType#reload calls loadAsset within a AccessController.doPrivilege block - AssetType#createInstance does not call loadAsset within a AccessController.doPrivileged block