We should target JDK9 for the modules related option and not just JDK9.

Moreover, we should run at most as possible with --illegal-access=deny to detect illegal accesses in our own code.