My companies security scan is complaining about log4j 1.x inside my Janusgraph install folder (linux). We are running 0.4 and considered upgrading to 0.6, but when I looked at the files in that install, it also includes log4j 1.x. Is there any way to upgrade to log4j 2.x with the currently installed version?