Support recursive execve observations