buildout has

allow-picked-versions=False

, which is super super nice to have