This breaks pretty badly for dynamically linked "docker" binaries, btw (such as those created by official distro packaging).