DO NOT include bouncycastle. It won't pass signature verification, it needs to be a separate file.

This reverts commit afa846af37d03075168e9e2a2a1644b035df2169.