Allow cryptography versions >3 (but <4) (#164)
Allow cryptography versions >3 (but <4) (#164)

This is required otherwise applications that use signxml are vulnerable
to CVE-2020-25659.
https://github.com/advisories/GHSA-hggm-jpg3-v476
XML-Security/signxml,XML-Security/signxml