ivory-tower: taskLocals are public, taskDependency gives both user and loop pkgs