573b22ccb7ce ("sh: sanitize the flags on sigreturn")