Noticed this, fast. Mounting /tmp with noexec means I can't install 
packages, as attempting to do so results in a permissions error.
Remounting without noexec resolves this issue, but I'd rather lock down 
/tmp, if possible.