Mount /run/shm noexec