This is hard to fix, and I'd appreciate some guidance.

ExpressionFactory.newInstance() lacks any way to pass in a class loader. It always uses the TCCL. Setting the TCCL is a privileged action.

So, can the code HV set the context classloader to the external classloader before creating an expression factory? Or do we need to add an ExpressionFactory to the configuration, and leave it to the caller to fiddle with the TCCL to obtain it?