we use

/etc/pexrc

+

PEX_PYTHON

to point all pex execution (incl pants) to a “pristine” python (not on $PATH) that gets pushed to dev laptops