snapshot: switch back to mprotect-based snapshotting