using both the rawio_spec and passthru actions to detect raw disk activity. Same for kernel memory policy. Update documentation (no longer need to expose veriexec_rawchk()) and remove all Veriexec-related bits from specfs.