If we pin msgpack we limit where the gem can be installed

[wjessop]

We want clients to be able to specify their own msgpack version and pinning it might prevent that.