tighten dependencies for keystone and heat