7029 want per-process exploit mitigation features (secflags)
7030 want basic address space layout randomization (aslr)
7031 noexec_user_stack should be a secflag
7032 want a means to forbid mappings around NULL.

*** 139,149 ****
  #define SNF     97              /* print AT_SYMLINK_[NO]FOLLOW flag */
  #define SKC     98              /* print sockconfig subcode */
  #define ACF     99              /* accept4 flags */
  #define PFD     100             /* pipe fds[2] */
  #define GRF     101             /* getrandom flags */
! #define HID     102             /* hidden argument, don't print */
                                  /* make sure HID is always the last member */
  
  /*
   * Print routines, indexed by print codes.
   */
--- 139,151 ----
  #define SNF     97              /* print AT_SYMLINK_[NO]FOLLOW flag */
  #define SKC     98              /* print sockconfig subcode */
  #define ACF     99              /* accept4 flags */
  #define PFD     100             /* pipe fds[2] */
  #define GRF     101             /* getrandom flags */
! #define PSDLT   102             /* secflagsdelta_t */
! #define PSFW    103             /* psecflagswhich_t */
! #define HID     104             /* hidden argument, don't print */
                                  /* make sure HID is always the last member */
  
  /*
   * Print routines, indexed by print codes.
   */