switch dep for sftp, fix the issue w/ jar signing on linux