Does strict_deps cause those jars to not end up in the compile_classpath, and thus not in the fingerprint?