even though man page says otherwise, addr and len to mprotect must be page-aligned...