use javadoc plugin with security fix