vmscan: limit VM_EXEC protection to file pages