see docs/ for details about exec-shield.