18:bcrypt==4.0.1  # direct bcrypt usage (passlib 1.7.4 incompatible with bcrypt>=4.1)