Is there an option one can pass to pants when building a python target that refuses to download a dependency that isn't pinned?