Use buildout.dumppickedversions
Pin all packages
Update the LocalRolesToPrincipals fields to use zope.schemaevent