It's not great to depend on both zip and our async crate -- it bloats the binary, and it means we're exposed to vulnerabilities in both.