+++ This bug was initially created as a clone of Bug #1134735 +++

Description of problem:
After installation of 6.3.1.CR1 patch on 6.3.0, we noticed that the this jar:

modules/system/layers/base/org/jboss/resteasy/resteasy-spring/main/bundled/resteasy-spring-jar/resteasy-spring-2.3.8.Final-redhat-3.jar

does not get crippled (its MD5 sum stays the same after patch installation). It might be because patching subsystem doesn't expect jars being under two subdirectories under the 'main' directory (?)

Steps to Reproduce:
1. Install this patch: http://download.devel.redhat.com/devel/candidates/JBEAP/JBEAP-6.3.1.CP.CR1/jboss-eap-6.3.1.CP.CR1-patch.zip on EAP 6.3.0.

Actual results:
resteasy-spring-2.3.8.Final-redhat-3.jar is not crippled (even though this module was overlaid by the patch) and JRE is able to load classes from it

Expected results:
all jars in overlaid modules should be unusable

Additional info:
For a quick check whether JRE is able to load classes from a JAR, you can use this groovy command:

groovysh -cp resteasy-spring-2.3.8.Final-redhat-3.jar "Class.forName('javax.ws.rs.core.MediaTypeEditor')"

where javax.ws.rs.core.MediaTypeEditor is a class included in the jar. If the JRE is unable to load the class, you will get a ClassNotFoundException.