Python cryptography, starting with 3.4, uses rust-based dependencies from cargo.io to build. The downstream tooling cannot pull these dependencies in. Version 3.3 can be built downstream. With RHEL8.4, cryptography==3.3.1 will be available. Therefore, to be on a long term supportable version the 3.3.1 version will be used now and version bumps in sync with RHEL.