module-access: determine trusted application executable
Determine application executable file so that the result can be trusted, and the file exists in the current namespace.
Don't use /proc/pid/cmdline, since that contains whatever was specified by the exec() call.