add an apply-pax-flags binary