See
  - https://github.com/pyca/cryptography/issues/2968 (discussion)
  - https://github.com/pyca/cryptography/issues/1141 (older)