7029 want per-process exploit mitigation features (secflags)
7030 want basic address space layout randomization (aslr)
7031 noexec_user_stack should be a secflag
7032 want a means to forbid mappings around NULL.

@@ -110,10 +110,11 @@
 static const ps_ops_t P_idle_ops = {
         .pop_pread      = Pread_idle,
         .pop_pwrite     = Pwrite_idle,
         .pop_cred       = (pop_cred_t)Pidle_int,
         .pop_priv       = Ppriv_idle,
+        .pop_secflags   = (pop_secflags_t)Pidle_int,
         .pop_psinfo     = (pop_psinfo_t)Pidle_voidp,
         .pop_platform   = (pop_platform_t)Pidle_voidp,
         .pop_uname      = (pop_uname_t)Pidle_int,
         .pop_zonename   = (pop_zonename_t)Pidle_voidp,
 #if defined(__i386) || defined(__amd64)