boot.binfmt.registrations.<name>.mask

A mask to be ANDed with the byte sequence of the file before matching.