TODO

Kernel
======
Hand userspace fstat results for object with event (currently get a fd)

Userspace
=========
Handle double events (exec_perm/open_perm)
Fix new pattern detection and swing between them based on exec_perm support
Bring back LD_PRELOAD detection
Does reversing path string improve lookup performance?
Handle long paths by hashing it (lmdb has 511 byte limit) (Which hash to use?)
During startup, update database with current trust sources
During startup, block accesses while sync'ing trust database
Add file verification scrubber and update database status
Use the verified status in decisions
Handle rpm updates including updating the database
Add admin defined whitelist of dirs or files
Add sighup handler
Support SWID as trust source
Allow globbing