Indeed for NetBeans this codepath should not be hit. If permissions were somehow messed with though, the file might indeed be unreadable and thus explain why the "load from classpath" route is taken.
To use the App Store Server API or create promotional offer signatures, a signing key downloaded from App Store Connect is required. To obtain this key, you must have the Admin role. Go to Users and ...