Pin requests=2.3.0 due to https://bitbucket.org/hpk42/devpi#144
run.sh is not clever enough to be an entrypoint