To close out this thread, my problem with Brett's patch not working was that
the patch that came through email as only a partial diff.  Offline, Elad
suggested:

Elad Efrat wrote:
> hm. it seems like the posted patch was partial.
> 
> open up kern_verifiedexec.c and look for this, in veriexec_raw_cb:
> 
> 	fileassoc_table_run(bvp->v_mount, veriexec_hook,
> 	    (fileassoc_cb_t)veriexec_purge);
> 
> and change 'veriexec_purge' to 'veriexec_internal_purge'. that fixes 
> your problem. :)


(change "veriexec_internal_purge" to "veriexec_file_purge" to sync up with
Brett's posted diffs)

That solves the problem.

	ScottE