7029 want per-process exploit mitigation features (secflags)
7030 want basic address space layout randomization (aslr)
7031 noexec_user_stack should be a secflag
7032 want a means to forbid mappings around NULL.

@@ -345,17 +345,14 @@
 #define AUE_SETSID              307     /* =pm setsid(2) */
 #define AUE_SETPGID             308     /* =pm setpgid(2) */
 #define AUE_FACCESSAT           309     /* =no obsolete */
 #define AUE_AUDITON_GETAMASK    310     /* =aa */
 #define AUE_AUDITON_SETAMASK    311     /* =as */
-
-
+#define AUE_PSECFLAGS           312     /* =pm psecflags */
 
 /* NOTE: update MAX_KEVENTS below if events are added. */
-
-#define MAX_KEVENTS             311
-
+#define MAX_KEVENTS             312
 
 #ifdef __cplusplus
 }
 #endif