We removed pinning golang.org/x/crypto to a specific version via #2844. The version in Gopkg.toml still points to golang/crypto@505ab14

review what happened in the meantime and update this dependency.

related lengthy discussion: #3374

Currently used in: