rollback bouncycastle 1.47 as we aren't using it and it causes havok in maven