[arch-dev-public] Libexec policy?