The basepython line was causing the py35 tests to actually run under
It was doing the same to pypy. Add pypy to bindep with the pypy tag.
Cryptography and the version of pypi in xenial are incompatible, so
update the pypy job to run on fedora-26 instead, which has a new enough
Shift the line so that it only applies to functional and ansible tests,
since that's where it's used.