it's safer to build the venv in a build directory, since it's possible that we delete our actual code when making the virtualenv if we're not careful.