We need to build the tarball on something that has Gtk4, and even
without Gtk4 we need to test on f36 (because we depend on
NMA_CERT_CHOOSER_FLAG_NO_PASSWORDS).