Only enable exec-shield when possible