Install isolate without o+x mod.

This will help mitigate the effect of future security bugs.
Install isolate with group assigned to cmsuser.

Otherwise no one is allowed to run it besides root.