probe to observe exec sid changes