At my work they would also disable ptrace in the kernel and require you to explain why need it