Isn't there a way to set up mounts so that they are non-executable?