This commits needs a MAJOR audit as I oftentimes just guessed which of `$hostOffset`, `$targetOffset`, or a fixed offset should be used.
This will get propagated down to other libraries loaded because everything in nixpkgs references CF based on an rpath entry.