Hmm... I think I would argue that annotation should have the codebase embedded and only issue a remote call to verify this codebase - not to retrieve it.
How about we get rid of Module interface and require annotation to be RmiModule (which is final)? Michal [snipped the whole discussion below since it looked like it was unmanageable anymore]
