This way we can pin tox/pip versions (which are used in the native Travis environment) *and* get notified about updates by requires.io.