Adds a workaround for the large latency from IMA hashing our entire -vm_size vmcode region: it computes the hash just once, so we temporarily map our memfd while it's tiny before we set the size. This is not guaranteed to work for future IMA implementations, however.
Issue: #3566 (closed)