restrict pyopenssl version to non-ffi dependent