my understanding is that this hook is the only one, but to properly secure io_uring one has to implement a check for every call here. or just disable it.