Does the

python_distribution

with PEP-517's

requires

be used with an existing resolve and lock file for build-time dependencies? While it's not necessary to actually build the package, wouldn't it help with having a hermetic build environment?