Ok, sussed. I'll get a Pex fix out and that whole rigamarole. The fix though is simply nuking

~/cache/pants/named_caches/pex_root/code/

. The problem is specific to

--not-zip-safe

PEXes built with any older version of PEX.