Ignore buildout artifacts.
Don't pin zope.security/zope.traversing.

Currently-released versions are non-alpha, and work fine.