Troubles with conflicting cryptography and cffi

Describe the bug

I'm adding a but to bandit as it is the reason for https://github.com/gee-community/qgis-earthengine-plugin/issues/439. bandit is flagging cryptography and cffi, but forcing them to be recent leads to this:

ImportError: dlopen(.../cryptography/hazmat/bindings/_[rust.abi3.so](http://rust.abi3.so/), ...):
  code signature ... not valid for use in process:
  mapping process and mapped file (non-platform) have different Team IDs

This likely needs to work from both https://github.com/pyca/cryptography and https://github.com/python-cffi/cffi. And possibly https://github.com/googleapis/google-cloud-python/tree/main/packages/google-auth

@zacdezgeo

Reproduction steps

Ran bandit on https://github.com/gee-community/qgis-earthengine-plugin

Expected behavior

Being able to specify a recent cryptography + cffi combination that doesn't have any issues.

Bandit version

1.9.1 (Default)

Python version

3.14 (Default)

Additional context

No response