but my general impression of "hermeticity" is that "the same command line produces a bit-for-bit reproducible output file"