The most recent commit to ocaml-pcre added support for JIT-compilation of patterns; this results in an mmap'd region with PROT_WRITE | PROT_EXEC, which will raise concerns by, say, grsec. As we have no need for this feature, nor is it used by the pcre package other than a default initialization, we will pin to the commit preceding the last.