only need one mprotect