The get-pip script allows the use of constraints now, so to provide the maximum protection we should use it. This also reduces one of the places where we need to do package pinning. Change-Id: I4618615b84618401359b5c5c6f51512e6c9a697e