some more security, nosuid and noexec on tmp

Also moved build file to /usr/src/EFA (because /tmp has noexec..)