https://docs.kernel.org/userspace-api/check_exec.html#secbit-exec-restrict-file-and-secbit-exec-deny-interactive