Ubuntu noble tries to use `fchmodat2` (new syscall) and gets permission denied instead of ENOSYS.

This is a small security risk but it's running inside of circleci containers anyway so i think its acceptable.