Lock down setuptools and zc.buildout to avoid elementree bad version issue