restrict tryocaml to <4.01
ospec is not a depopt for bes, as the build fails without it