had to specify a dependency on cryptography in our BUILD file, too