first part of hardening the pom.xml file