There's a PR up with a modified version of jersey-json built to use jackson 2, so simplifying our json dependencies
https://github.com/apache/hadoop/pull/3988 the author is an ASF member, so can be trusted as much as the rest of us, we just have to decide about whether we go with a change which will complicate the excludes logic of other apps we are doing this for reload4j,...shall we do the same with jersey?