https://foojay.io/today/log4j-isnt-killing-java/