in our builds at Twitter tho, we lean very heavily on static linking at .whl construction time which optimizes for this sort of portability/isolation