Towards Build Verifiability for Java-based Systems