Only permit disabling ASLR via ptrace if securelevel is 0 or lower
Don't allow execution of a setuid/setgid process if ASLR has been disabled via ptrace