bumping version, requiring only specific version of fernet