Paranoid mode should be secure

[stephenrkell]

We can already optionally do a "paranoid scan" which warns on intra-instruction byte sequences that incidentally can perform system calls. But it's just a warning. Ideally we would have a story on preventing these.