pin to buildout version < 2.0

2.0 has been released and it breaks our build