7029 want per-process exploit mitigation features (secflags)
7030 want basic address space layout randomization (aslr)
7031 noexec_user_stack should be a secflag
7032 want a means to forbid mappings around NULL.

@@ -3047,10 +3047,11 @@
         __nthreads;
         __openattrdirat;
         option_to_attr;
         __priv_bracket;
         __priv_relinquish;
+        psecflags;
         pset_assign_forced;
         pset_bind_lwp;
         _psignal;
         pthread_attr_getdaemonstate_np;
         pthread_attr_setdaemonstate_np;

@@ -3063,10 +3064,30 @@
         _resume;
         _resume_ret;
         _rpcsys;
         _sbrk_grow_aligned;
         scrwidth;
+        secflag_by_name;
+        secflag_clear;
+        secflags_copy;
+        secflags_difference;
+        secflags_fullset;
+        secflags_intersection;
+        secflags_isempty;
+        secflag_isset;
+        secflags_issubset;
+        secflags_issuperset;
+        secflag_set;
+        secflag_to_bit;
+        secflag_to_str;
+        secflags_union;
+        psecflags_validate_delta;
+        secflags_zero;
+        psecflags_default;
+        secflags_parse;
+        secflags_to_str;
+        psecflags_validate;
         semctl64;
         _semctl64;
         set_setcontext_enforcement;
         _setbufend;
         __set_errno;