The permits clause of a sealed class requires that subclasses reside in the same module (or the same package, depending on the module system configuration).