Revert "maybe hack for the common problem of not loading the bouncy-castle jars"

This reverts commit d08c00e42354f714ff57b78ebd72045bfafdeab2.
fix loading issue with bouncy-castle via classpath: protocol
the second shade-plugin is now used in the verify phase before install since the profiles did not work. i.e. normal mvn package will trigger only ONE shade execution
[skip ci]