Upstream has backported MINA 2.8 to Gerrit 3.5 and in the process
backported some fairly large JGit updates. This doesn't fix the rsa sha1
problem yet (working on getting that change backported is a WIP), but I
do want to test that MINA and JGit updates don't create problems for us.
We should probably hold off on landing this change until after the
OpenStack release just in case.
Change-Id: I3197b4cb90228bf8f906377b0a5e06748b0574ca