CRED: Guard the setprocattr security hook against ptrace