- 1.659, install kernel modules as non-exec to avoid various
  post-scripts trying to work on them