restricted writes to executables
tracked down the last memory leak so multi-oom works
tracked down the last memory leak so multi-oom works