7029 want per-process exploit mitigation features (secflags)
7030 want basic address space layout randomization (aslr)
7031 noexec_user_stack should be a secflag
7032 want a means to forbid mappings around NULL.

*** 109,118 ****
--- 109,119 ----
                  prof.5                  \
                  rbac.5                  \
                  regex.5                 \
                  regexp.5                \
                  resource_controls.5     \
+                 security-flags.5        \
                  smf.5                   \
                  smf_bootstrap.5         \
                  smf_method.5            \
                  smf_restarter.5         \
                  smf_security.5          \