Using spidermonkey[-jit] for PolKit to avoid PaX exceptions

A workaround for (#444446) has been also added.

src/etc/portage/package.keywords

@@ -34,7 +34,7 @@
 =net-misc/proxychains-3.1_p20110225*
 
 # Library-only Javascript for PolKit (#437520)
-=dev-lang/spidermonkey-1.8.5-r2
+=dev-lang/spidermonkey-1.8.7-r1
 
 # Firmware
 sys-firmware/amd-ucode

src/etc/portage/package.unmask

@@ -0,0 +1,2 @@
+# Masked due to reverse dependencies issues
+~dev-lang/spidermonkey-1.8.7

src/root/setup

@@ -298,6 +298,11 @@ sinfo "Generating localization, timezone and keyboard layout menus"
 ${helpdir}/gen-locale-menu
 
 
+# (#444446)
+sinfo "Re-enabling PaX for incorrectly marked executables"
+paxctl -ze /usr/lib/polkit-1/polkitd
+
+
 # No sub-pixel rendering, since LCD / cable type is unknown
 sinfo "Configuring fontconfig"
 for fconf in \