closes #2527

none of our dependencies which depend on hoek have updated to fix this issue

luckily the issue is not relevant to any of our runtime code -- the vulnerable version of hoek is used by babel-cli, node-sass, sqlite3, and webpack -- none of these are runtime deps
(well webpack is sorta runtime but its usage of hoek is only during dev usage (watchpack))