Honestly, I only kow this stuff to be a library. I can see some advantage in offloading this to a separate process, so you can update both processes separately,

Honestly, I only kow this stuff to be a library. I can see some advantage in offloading this to a separate process, so you can update both processes separately, don't trample over the other's heap, etc. (Especially if the original executable can't be modified, as seems to be their rationale) But it should obviously run in the same container/pod/etc.