Whilst this is not used in the dependencies, the enforcer plugin downloads
the i1.580.1 jar so it can scan it.  Most likely a bug in the
extra-enforcer-rules but we obviously don;t need it as we have an explicit
dependency on the latest version!

The failure was in ClassLoader.checkCerts that throws the following
exception:

    if (pcerts != null && !compareCerts(pcerts, certs)) {
        throw new SecurityException("class \""+ name +
             "\"'s signer information does not match signer information of other classes in the same package");
    }