Is paho still an explicit dependency?