Upgrade to bouncycastle 1.49 to fix CVE-2013-1624

Forward port of https://github.com/jclouds/jclouds-karaf/pull/29 to master