It seems at least portage will be able to remove the dependency on dev-python/cryptography: https://archives.gentoo.org/gentoo-dev/message/73e4a44a8d047...