I think we can just say `UNBOUND_BINARY = 'unbound'` and subprocess.Popen will find it on $PATH.