Add exec=off / suid=off to /var/{tmp/log} and /tmp by default.

Also add options to disk editor to enable / disable suid / exec on
datasets