keep binaries out