Whitelisting in Suhosin is needed to make this work, but
unfortunately this will disable whitelisting for all of
phar.  A pretty debatable design choice, but for now we
keep this on -devel until we know what to do...