# Machine custody uses the existing authorized Windows process principal and # local NTFS; no new account, service provisioning or interactive login. pywin32>=311,<400; sys_platform == "win32" # X25519/AES-GCM for controller-managed keys and selected-record payloads. cryptography>=46,<51