I'm sure I mentioned this elsewhere, but can't find it now: if we do end up adding `-a` here, we can also remove the `go install`/`go test -a` hacks from the main Dockerfile.