flake8-bandit doesn't work with flake8 v5.0

Style unit test with flake8 is failing to load flake8-bandit plug in.

See this issue: https://github.com/tylerwince/flake8-bandit/issues/33

We should probably restrict flake8<5.0 until there's a fix upstream.