[FIXED JENKINS-9017]

Fixed incorrect de-allocation of a classloader from the exported object
table.

The fix is a defense-in-depth; it prevents classloaders referenced in
the object graph from doubly released, then we also make it impossible
for bugs like this to deallocate the key classloader.