NLTK 3.10.1 shipped inisec.py, a meta-path import hook that blocks
stdlib imports when CWD is on sys.path. With WORKDIR / in the
container, every path is relative to CWD, causing xml.etree imports
to fail and crashing kg-extract-ontology. The hook was removed in
3.10.2.