This doesn't seem right to me - maybe we can filter out known-bad tags instead?  Like `apparmor`?  Or just make sure that code also includes proper build tags for platforms it supports? (ie, exactly like all the rest of our build tags)