log4j & activation dependencies flagged as banned when running with -Penforce-banned-dependencies (project pom enforce plugin)

 When running Maven build with -Penforce-banned-dependencies (this triggers enforcer-plugin block of specific dependencies to be bundled) errors are shown for hippo-cms-commons and hippo-cms-utilities and other projects. Marked as banned in the project pom, might require to be set as provided

mvn validate -Penforce-banned-dependencies 

21:13:35 [WARNING] Rule 0: org.apache.maven.plugins.enforcer.BannedDependencies failed with message:21:13:35 Found Banned Dependency: org.apache.logging.log4j:log4j-core:jar:2.11.1*21:13:35* Found Banned Dependency: org.apache.logging.log4j:log4j-1.2-api:jar:2.11.1*21:13:35* Found Banned Dependency: org.apache.logging.log4j:log4j-api:jar:2.11.1