Setuptools is a runtime requirement
According to
https://gitlab.com/kraxel/virt-firmware/-/blob/4a3b4220795716eb50e94df27514719163bc0381/virt/firmware/efi/certs.py#L4
and
https://gitlab.com/kraxel/virt-firmware/-/blob/4a3b4220795716eb50e94df27514719163bc0381/virt/firmware/varstore/aws.py#L9
this project requires setuptools during runtime (but only declares cryptography and pefile in install_requires).
Maybe the requirement for setuptools can be replaced with something builtin? Otherwise it should be listed in install_requires.