switch from lockdown to shrinkwrap. closes #603