diff --git a/Cargo.lock b/Cargo.lock
index 9c981e89..cceb7a77 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2225,8 +2225,6 @@ version = "0.8.0"
 dependencies = [
  "aws-config",
  "aws-sdk-ssm",
- "serde",
- "serde_json",
  "snafu",
  "tokio",
  "tough",
@@ -2314,7 +2312,6 @@ dependencies = [
  "log",
  "maplit",
  "olpc-cjson",
- "pem",
  "rayon",
  "reqwest",
  "ring",
@@ -2323,7 +2320,6 @@ dependencies = [
  "simplelog",
  "snafu",
  "tempfile",
- "tokio",
  "tough",
  "tough-kms",
  "tough-ssm",
diff --git a/tough-ssm/Cargo.toml b/tough-ssm/Cargo.toml
index c7fd675a..6fa0fcda 100644
--- a/tough-ssm/Cargo.toml
+++ b/tough-ssm/Cargo.toml
@@ -18,7 +18,5 @@ aws-sdk-rust-rustls = ["aws-config/rustls", "aws-sdk-ssm/rustls"]
 tough = { version = "0.13", path = "../tough", features = ["http"] }
 aws-sdk-ssm = "0.28"
 aws-config = "0.55"
-serde = "1"
-serde_json = "1"
 snafu = { version = "0.7", features = ["backtraces-impl-backtrace-crate"] }
 tokio = { version = "1", features = ["fs", "io-util", "time", "macros", "rt-multi-thread"] }
diff --git a/tuftool/Cargo.toml b/tuftool/Cargo.toml
index 7065d599..b6601ae0 100644
--- a/tuftool/Cargo.toml
+++ b/tuftool/Cargo.toml
@@ -25,7 +25,6 @@ hex = "0.4"
 log = "0.4"
 maplit = "1"
 olpc-cjson = { version = "0.1", path = "../olpc-cjson" }
-pem = "1"
 rayon = "1"
 reqwest = { version = "0.11", default-features = false, features = ["blocking", "rustls-tls"] }
 ring = { version = "0.16", features = ["std"] }
@@ -34,7 +33,6 @@ serde_json = "1"
 simplelog = "0.12"
 snafu = { version = "0.7", features = ["backtraces-impl-backtrace-crate"] }
 tempfile = "3"
-tokio = "1"
 tough = { version = "0.13", path = "../tough", features = ["http"] }
 tough-kms = { version = "0.5", path = "../tough-kms" }
 tough-ssm = { version = "0.8", path = "../tough-ssm" }