Do I need the cli binary to be accessible? I'm trying to see if I can embed pulumi in a service without any disk access.