Locking down versions of botocore and m2crypto