removed direct dependency on kryo 2.21. relying on transitive dependency from kryo-serializers. fixes library conflicts between kryo 2.21 and
spring-security-acl plugin