[FD] Mitigations for "carpet bombing" alias "directory poisoning" attacks against executable installers