7029 want per-process exploit mitigation features (secflags)
7030 want basic address space layout randomization (aslr)
7031 noexec_user_stack should be a secflag
7032 want a means to forbid mappings around NULL.

*** 3046,3055 ****
--- 3046,3056 ----
          __nthreads;
          __openattrdirat;
          option_to_attr;
          __priv_bracket;
          __priv_relinquish;
+         psecflags;
          pset_assign_forced;
          pset_bind_lwp;
          _psignal;
          pthread_attr_getdaemonstate_np;
          pthread_attr_setdaemonstate_np;
*** 3062,3071 ****
--- 3063,3092 ----
          _resume;
          _resume_ret;
          _rpcsys;
          _sbrk_grow_aligned;
          scrwidth;
+         secflag_by_name;
+         secflag_clear;
+         secflags_copy;
+         secflags_difference;
+         secflags_fullset;
+         secflags_intersection;
+         secflags_isempty;
+         secflag_isset;
+         secflags_issubset;
+         secflags_issuperset;
+         secflag_set;
+         secflag_to_bit;
+         secflag_to_str;
+         secflags_union;
+         psecflags_validate_delta;
+         secflags_zero;
+         psecflags_default;
+         secflags_parse;
+         secflags_to_str;
+         psecflags_validate;
          semctl64;
          _semctl64;
          set_setcontext_enforcement;
          _setbufend;
          __set_errno;