buildout has `allow-picked-versions=False`, which ...