Add patch to disable PR_SET_NO_NEW_PRIVS on child process.