Wow it's way harder to remove system dependencies than you would think.
I removed default java.library.path from JDK but JRuby through the JFFI has some too.
```
[pid 3780980] openat(AT_FDCWD, "/nix/store/h434jxl0adgk6lwh15gf7nl0fkbqx88q-jruby-9.2.17.0/lib/jruby.jar", O_RDONLY) = 32
[pid 3780980] openat(AT_FDCWD, "/nix/store/h434jxl0adgk6lwh15gf7nl0fkbqx88q-jruby-9.2.17.0/lib/jni/x86_64-Linux/libjffi-1.2.so", O_RDONLY) = 32
[pid 3780980] openat(AT_FDCWD, "/nix/store/h434jxl0adgk6lwh15gf7nl0fkbqx88q-jruby-9.2.17.0/lib/jni/x86_64-Linux/libjffi-1.2.so", O_RDONLY|O_CLOEXEC) = 32
[pid 3780980] openat(AT_FDCWD, "/etc/ld.so.conf", O_RDONLY) = 32
```