bugfix: missing dependencies in merlin-acme