bintr: Allow disabling arena per-program

[fwsGonzo]

Also, some changes to prevent local-jump to locations outside of the execute-segment. This change enables executing remote calls into a binary translated machine (with fast-path arena disabled)