Maybe I wasn't clear with my last comment. I mean, I suppose users can verify ed25519 signatures in pure Python when they ```pip install tuf```, and then for all else they should do ```pip install tuf[tools]```?