kvm: pin paramiko version