Forbid S-mode execution from user memory