[graywh]

we get a form of this with our two-stage image building process -- the first stage installs all dependencies and we only update it when dependencies change