Python3-setuptools seems old and installing crcmod (dependency from tockloader) from pip fails because of this. Installing from the system package manager should solve the problem.
Trusty is quite old and Xenial is the default. We should be fine not giving any distribution. This will give us a more recent OpenSSL version.