7029 want per-process exploit mitigation features (secflags)
7030 want basic address space layout randomization (aslr)
7031 noexec_user_stack should be a secflag
7032 want a means to forbid mappings around NULL.

*** 270,279 ****
--- 270,280 ----
                  printf.o        \
                  priocntl.o      \
                  priv.o          \
                  priv_const.o    \
                  proc.o          \
+                 psecflags.o     \
                  procset.o       \
                  processor_bind.o        \
                  processor_info.o        \
                  profil.o        \
                  project.o       \
*** 295,304 ****
--- 296,306 ----
                  sid.o           \
                  sidsys.o        \
                  sched.o         \
                  schedctl.o      \
                  sctp_crc32.o    \
+                 secflags.o      \
                  seg_dev.o       \
                  seg_kp.o        \
                  seg_kpm.o       \
                  seg_map.o       \
                  seg_vn.o        \