make stack non-executable in release build