go get for cfssl fails with module declared its path as ... but was required as ...

doing `go get -x -u github.com/cloudflare/cfssl/cmd/...`
fails with:
```
go get: github.com/coreos/bbolt@v1.3.2 updating to
        github.com/coreos/bbolt@v1.3.5: parsing go.mod:
        module declares its path as: go.etcd.io/bbolt
                but was required as: github.com/coreos/bbolt
```

reproduced in multiple environments