sanitise_mmap can be static now