the current jar is over 3 years old, we should upgrade it for bugfixes. the current integration could be more secure: set a global policy and enforce additional (compile-time) checks closes #14466