OS-2954 lx brand access.2 allows root execution when exec mode not set