Override execute() so non-bwrap runs use a unique permission key per invocation (see is_complex_command after build_perm_question).