is a list of directories that are assumed to contain only 'safe' binaries. If an attacker can write an executable to one of these directories then we will run arbitrary code.
The amount of concurrent processes to use
See Implementation