there's a reason reproducible builds are a thing and most compilations aren't