Hrm, ok - it was the rule that produced BashBinary. That rule also worked fine in other contexts, but not here ... I'll see if I can figure out a comprehensible reason and report back my learnings.