dmz: use overlayfs to write-protect /proc/self/exe if possible

dmz: use overlayfs to write-protect /proc/self/exe if possible #6740