Oracle adds long-awaited whitelisting capabilities to Java