ocaml binary hardening upstream questions