7029 want per-process exploit mitigation features (secflags)
7030 want basic address space layout randomization (aslr)
7031 noexec_user_stack should be a secflag
7032 want a means to forbid mappings around NULL.

*** 210,219 ****
--- 210,220 ----
          proc_free_priv;
          proc_get_auxv;
          proc_get_cred;
          proc_get_priv;
          proc_get_psinfo;
+         proc_get_secflags;
          proc_get_status;
          proc_initstdio;
          proc_lwp_in_set;
          proc_lwp_range_valid;
          proc_signame;
*** 276,285 ****
--- 277,288 ----
          ps_pread;
          ps_pstop;
          ps_ptread               { FLAGS = NODYNSORT };  # Alias of ps_pread
          ps_ptwrite              { FLAGS = NODYNSORT };  # Alias of ps_pwrite
          ps_pwrite;
+         Psecflags;
+         Psecflags_free;
          Pstack_iter;
          Pstate;
          Pstatus;
          Pstop;
          Pstopstatus;