new execute option, unsigned detection, etc