Getting an InputStream from a JarURLConnection for a nested jar or an entry in a nested jar creates a JarFile that's never closed

[wilkinsona]

[wilkinsona]

The fix for this feels a little bit risky. Let's only address it in 2.2.x for now. We can back port it in the future if necessary.