privileged-mode and binfmt_misc are no longer required