Enabling no_new_privs/NoNewPrivs, disabling setuid on Linux | Not Hacker News!