only flip exec bit if needed