`get-pip`-first instructions, due to vendoring pkg_resources