Lock yum and runit to <3
* force node.set for key attributes
* allow versioned install of gems/pip packages
pin python