Actually call restrictSysCalls from Security_dropPermissions and prohibit execve syscall