mod 744: can list files but can't execute mod 711: can't list files but can execute designated file

so, strong protection should be 711