add upper restriction on DN jars to eliminate 4.0+