iner is python@); nobody may have looked at the dependencies very closely. "certbot renew" runs successfully without setuptools installed, and ktrace shows that it does not touch any paths related to setuptools.