allow_exec{mem,stack} default to on?