Extras for bandit

Rather than put bandit in test-requirements.txt, put it in its
own section in [extras].

Change-Id: I53ac219ac8b7be077edb2a2ce5d4ed5f69d0a8e4

setup.cfg

@@ -29,6 +29,8 @@ memcache =
   python-memcached>=1.56
 MongoDB =
   pymongo>=3.0.2
+bandit =
+  bandit>=0.13.2
 
 [global]
 setup-hooks =

test-requirements.txt

@@ -32,8 +32,5 @@ oslosphinx>=2.5.0 # Apache-2.0
 
 tempest-lib>=0.6.1
 
-# Security checks
-bandit>=0.13.2
-
 # Functional tests.
 requests>=2.5.2

tox.ini

@@ -105,7 +105,7 @@ commands=
 commands = oslo-config-generator --config-file=config-generator/keystone.conf
 
 [testenv:bandit]
-deps = -r{toxinidir}/test-requirements.txt
+deps = .[bandit]
 commands = bandit -c bandit.yaml -r keystone -n5 -p keystone_conservative
 
 [hacking]