memfd_secret() in 5.14

Seems like there could be semantics giving the application warning that its memfd is going to be transitioned to open/accessible and that it should remove or encrypt its data and then back.