VM/Security: add security hook to do_brk