added picketlink dependencies to -with-security bom