kernfs: The cgroup filesystem also benefits from SB_I_NOEXEC