While it works as intended (try-catch doesn't propagate `RejectedAccessException` for security plugin to be approved later) it's very confusing for beginner to understand why there is no new script candidate for approving at `In-process Script Approval` section.

There are two ways to make it better

• add documentation note for catchError;
• optionally re-throw `RejectedAccessException`