This should be imported above `from cryptography.hazmat.primitives import constant_time, hmac`. Order of imports should be stdlib, then third party, then cryptography.