1allow keystore self:process execmem;
2