Bump cryptography from 40.0.1 to 40.0.2.