Duo flow authn audit

[Cantor, Scott]

> I don't recall having to set up a maven config last time I compiled it, but that was
> years ago.

It is impossible to skip that step, we moved all the URLs into settings, they're not in the POMs so they're not part of the published artifact interface anymore.

That was done so that if the terms with Central ever change, they can be uploaded as is dating back to older versions. Central does not want third party URLs in their POMs for reasons that devolve to "Maven's broken and insecure out of the box".

-- Scott