The basis for this is that one would hope that the developer is [using --binstubs](http://bundler.io/v1.5/man/bundle-exec.1.html). However we could err on the safe side instead  and `bundle exec` still?