Switch over to new RPATH logic by default, and fail hard on link errors.

Time to weed out the remaining issues!
Add allowed_outside() stubs to DarwinDynamicLibrary and Win32DynamicLibrary.
Add libexpat.so to Linux's allowed_outside list.  (Various X11 libraries link to it.)
Tweak the handler.try_again logic.