use a libexec dir for pip so it's not exposed to the enduser