Security: split proc ptrace checking into read vs. attach