Bump cryptography from 40.0.0 to 40.0.1.