pin zope.app.appsetup = 3.16.0 because the newer version requires zope.traversing>=4.0.0a2.