BPF_F_BPRM_SECUREEXEC
#define BPF_F_BRPM_OPTS_MASK BPF_F_BPRM_SECUREEXEC
bprm->secureexec = (flags & BPF_F_BPRM_SECUREEXEC);
bpf_bprm_opts_set(bprm, BPF_F_BPRM_SECUREEXEC);