v0.7nix

bind mount the host /etc/ssl/certs/

and also allow execution in writable memory, since the pcre jit requires
it (and other jits)