Reflection fails on non-exported classes
See http://dev.clojure.org/jira/browse/CLJ-2066
This currently affects data.xml (http://dev.clojure.org/jira/browse/DXML-32), but will affect general usage as well.
One thing to keep in mind is that javax.xml.stream.XMLInputFactory::newInstance always had the potential to return an instance of a type that is not accessible. It could have returned an instance of a package private class for example. Using getClass() and assume it is public has always been a bit of an anti-pattern in core reflection. Here's one way that you can walk to hierarchy to find the member that is accessible:
http://mail.openjdk.java.net/pipermail/jigsaw-dev/2016-September/009357.html
Unfortunately, that solution depends on java.lang.Module, which doesn't exist < java 9.