7029 want per-process exploit mitigation features (secflags)
7030 want basic address space layout randomization (aslr)
7031 noexec_user_stack should be a secflag
7032 want a means to forbid mappings around NULL.

*** 187,198 ****
--- 187,200 ----
          p0.p_lockp = &p0lock;
          p0.p_utraps = NULL;
          p0.p_brkpageszc = 0;
          p0.p_t1_lgrpid = LGRP_NONE;
          p0.p_tr_lgrpid = LGRP_NONE;
+         psecflags_default(&p0.p_secflags);
          sigorset(&p0.p_ignore, &ignoredefault);
  
+ 
          CPU->cpu_thread = &t0;
          CPU->cpu_dispthread = &t0;
          bzero(&cpu0_disp, sizeof (disp_t));
          CPU->cpu_disp = &cpu0_disp;
          CPU->cpu_disp->disp_cpu = CPU;