disable VM/VFS syscalls if we -n