restrict vhd-tool to cohttp<0.12.0