See https://github.com/dotnet/sdk/pull/51343/files/18e7355363b7ecb77ad81f9ff515cb7d6113de7e#r2446270194
PKCS is a dependency of Cryptography.Xml, which is exposed.
We'd like to prune Cryptography.Xml, but doing so will also prune PKCS.
Packages which are part of the shared framework should include and expose their entire closure.