if I run it with cProfiler it looks like

fileset.py:117(_do_rglob)

takes 27 cumulative seconds of the 39 total.

payload.py:109(_compute_fingerprint)

takes 22 cumulative seconds.