diff --git a/Cargo.lock b/Cargo.lock
index cc6b180..88e9b74 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1326,6 +1326,9 @@ dependencies = [
  "mtp-transport",
  "mtp-type-map",
  "mtp-webserver",
+ "rand",
+ "rcgen",
+ "tokio",
 ]
 
 [[package]]
@@ -1360,6 +1363,7 @@ name = "mtp-common"
 version = "0.3.0"
 dependencies = [
  "quinn",
+ "rustls",
  "thiserror 2.0.20",
  "wtransport",
 ]
diff --git a/Cargo.toml b/Cargo.toml
index 2c1b1ec..ee1c93a 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -113,5 +113,10 @@ tls = ["crypto", "mtp-crypto?/tls"]
 # Requires MTP_INSECURE_TLS=1 at runtime.
 insecure-tls = ["dep:mtp-transport", "mtp-transport?/insecure-tls"]
 
+[dev-dependencies]
+tokio = { version = "1", features = ["full"] }
+rcgen = "0.14"
+rand = "0.10.1"
+
 [package.metadata.cargo-machete]
 ignored = ["mtp-transport"]
diff --git a/common/Cargo.toml b/common/Cargo.toml
index 5fae68e..24d4777 100644
--- a/common/Cargo.toml
+++ b/common/Cargo.toml
@@ -15,6 +15,7 @@ wtransport = { version = "0.7.1", default-features = false, features = [
     "quinn",
     "self-signed",
 ] }
+rustls = { version = "0.23.41" }
 quinn = { version = "0.11.11", default-features = false, features = [
     "rustls-aws-lc-rs",
     "rustls",
diff --git a/example/Cargo.lock b/example/Cargo.lock
index ba5bf49..8d2fb30 100644
--- a/example/Cargo.lock
+++ b/example/Cargo.lock
@@ -1305,6 +1305,7 @@ name = "mtp-common"
 version = "0.3.0"
 dependencies = [
  "quinn",
+ "rustls",
  "thiserror 2.0.20",
  "wtransport",
 ]
diff --git a/type-map/Cargo.toml b/type-map/Cargo.toml
index 1cacaa0..ad811ae 100644
--- a/type-map/Cargo.toml
+++ b/type-map/Cargo.toml
@@ -16,7 +16,3 @@ pipes = []
 [build-dependencies]
 serde = { version = "1", features = ["derive"] }
 serde_yaml = "0.9"
-
-[package.metadata.cargo-machete]
-# cargo-machete does not inspect build.rs, where both build dependencies are used.
-ignored = ["serde", "serde_yaml"]