It might be possible to patch in a PC-relative call to code without going through the trampoline by searching the PLT and patching in a call with the offset to that. These facilities seem to be internal to RuntimeDyld, so some exposure of the functionality would be required.