Block execution not entirely. You could chmod it as non-x and use inotifywatch to flip it back.

Edit: I misunderstood you, use inotifywait like the other person suggested.