related: #6538 (this allows testing the binaries; to consider whether we can drop pycryptodomex)
aac770404f