my day job has a fixed list of binaries that are permitted to run (by digest)... 2 is on the list, and 4 isn't
(quite happily using 4 now at home!)