a) would bring in all kinds of stuff. the point of these BOMs is to *not* do that, right? So this seems to be not really a valid option given our goal for these BOMs.
b) yes, this would work, and it would mean we don't need the `/boms/pom.xml` file (which btw does get deployed to Nexus).

I originally did not create a `/boms/pom.xml` file because I didn't want it getting published. If people search Maven Central, they'd find this parent but it really isn't usable. 

Therefore, I prefer option b, and to completely get rid of the `/boms/pom.xml` file altogether (and revert the changes in the top-level `pom.xml` file.