Fix a couple bugs. Make the mprotect exec hardening per-jail.