--policy-integrity

[bmeck]

This allows mitigating if a policy file is changed on disk and prevents node from running with the modified file. An attacker would need to modify the command that runs node in order to escape this mitigation.

Checklist

• make -j4 test (UNIX), or vcbuild test (Windows) passes
• tests and/or benchmarks are included
• documentation is changed or added
• commit message follows commit guidelines