boxcutter/ubuntu1604 needs recent Vagrant, so pin at least 1.8.7

Xenial doesn't have Python 2 that ansible needs, so use ansible-bootstrap.sh to get it, though that might be way more than we need.