we should be making the tarball with git archive now (this is now idempotent, yay...