Drop unused pymongodb from requirements

Keystone no longer depends on mongodb after cache implementation was
split to oslo.cache[1]. Also, bandit is not a runtime dependency but
a test dependency, so should live in test requirements.

[1] 4969f66fca

Change-Id: I85f376d0897dd6b4dba758f86882fae70511fb6a

setup.cfg

@@ -35,10 +35,6 @@ ldap =
   ldappool>=2.3.1 # MPL
 memcache =
   python-memcached>=1.56 # PSF
-mongodb =
-  pymongo!=3.1,>=3.0.2 # Apache-2.0
-bandit =
-  bandit>=1.1.0 # Apache-2.0
 
 [entry_points]
 console_scripts =

test-requirements.txt

@@ -23,3 +23,5 @@ tempest>=17.1.0 # Apache-2.0
 
 # Functional tests.
 requests>=2.14.2 # Apache-2.0
+
+bandit>=1.1.0 # Apache-2.0

tox.ini

@@ -13,7 +13,7 @@ setenv =
 deps =
   -c{env:TOX_CONSTRAINTS_FILE:https://releases.openstack.org/constraints/upper/master}
   -r{toxinidir}/test-requirements.txt
-  .[ldap,memcache,mongodb]
+  .[ldap,memcache]
 commands =
   stestr run {posargs}
 allowlist_externals =
@@ -22,7 +22,6 @@ passenv = http_proxy,HTTP_PROXY,https_proxy,HTTPS_PROXY,no_proxy,NO_PROXY,PBR_VE
 
 [testenv:pep8]
 deps =
-  .[bandit]
   {[testenv]deps}
 commands =
   flake8
@@ -46,7 +45,6 @@ allowlist_externals = {toxinidir}/tools/fast8.sh
 deps =
   -c{env:TOX_CONSTRAINTS_FILE:https://releases.openstack.org/constraints/upper/master}
   -r{toxinidir}/requirements.txt
-  .[bandit]
 commands = bandit -r keystone -x 'keystone/tests/*'
 
 [testenv:cover]
@@ -112,7 +110,7 @@ per-file-ignores =
 deps =
   -c{env:TOX_CONSTRAINTS_FILE:https://releases.openstack.org/constraints/upper/master}
   -r{toxinidir}/doc/requirements.txt
-  .[ldap,memcache,mongodb]
+  .[ldap,memcache]
 commands=
     bash -c "rm -rf doc/build"
     bash -c "rm -rf doc/source/api"