<!--- Include motivation, code samples, and example data if relevant --> sigh. at least switching to `cbor2` shouldn't be a user-facing change.