python-cryptography{,-vectors} have to match upstream versions but I
guess ci.debian.net doesn't really understand this; according to
https://qa.debian.org/excuses.php?package=python-cryptography-vectors
this then blocks testing migration because updating p-c-v alone makes
p-c tests fail.
Is there a better way to handle this?