builds failing because tox was pulling in coverage 4.0a1 (even without --pre). pin coverage version in tox deps