Allow the user to pin oauth2 and requests. Require a minimum version, not an exact one.