Even statically linked runtime libraries must not leak symbols: the linker version script now whitelists oakcore_* only. nm reports 188 oakcore_* exports and zero anything else.
