anchor.diff: -{ lib, buildPythonPackage, isPy27, fetchPypi
  +{ lib
  +, buildPythonPackage
  +, pythonOlder
  +, fetchPypi
   , aiohttp
   , azure-common
   , azure-core
  
positive.code: buildPythonPackage rec {
    pname = "azure-keyvault-keys";
    version = "4.5.0";
    disabled = isPy27;
  
    src = fetchPypi {
      inherit pname version;
      extension = "zip";
      sha256 = "sha256-x1AhiARXZXcky3A+DJXoCrvkqsonlkgdrdr6es/VY3s=";
    };
  
    propagatedBuildInputs = [
  
negative.code:     cryptography
    ];
  
    checkInputs = [
      aiohttp
      pytestCheckHook
    ];
  
    pythonNamespaces = [
      "azure.keyvault"
    ];
  
    # requires relative paths to utilities in the mono-repo
    doCheck = false;
  
    pythonImportsCheck = [
      "azure"
  