use safer defaults for exported jars and confs