I think this is a shared problem across downstream packagers, and we really should push this as an upstream issue.
This is at least the fourth attempt I see at bypassing the cargo-bootstrap-cargo issue, yet the corresponding bug don’t have any reactions from core team: https://github.com/rust-lang/cargo/issues/1026
Can we maybe try to agree here or there on a common solution (cargo-bootstrap looks minimal and great to me), and then open a PR to rust-lang/cargo for that?