set label to prevent execution by non-system application.