`environment.yml`: It might be just my experience, but unless you have a specific implementation (e.g. a production-level docker service), you shouldn't need to pin the binaries to their hashes. I can see this being a problem for some platforms/systems down the line. Please correct me if I'm wrong! #435