7029 want per-process exploit mitigation features (secflags)
7030 want basic address space layout randomization (aslr)
7031 noexec_user_stack should be a secflag
7032 want a means to forbid mappings around NULL.

*** 345,361 ****
  #define AUE_SETSID              307     /* =pm setsid(2) */
  #define AUE_SETPGID             308     /* =pm setpgid(2) */
  #define AUE_FACCESSAT           309     /* =no obsolete */
  #define AUE_AUDITON_GETAMASK    310     /* =aa */
  #define AUE_AUDITON_SETAMASK    311     /* =as */
! 
! 
  
  /* NOTE: update MAX_KEVENTS below if events are added. */
! 
! #define MAX_KEVENTS             311
! 
  
  #ifdef __cplusplus
  }
  #endif
  
--- 345,358 ----
  #define AUE_SETSID              307     /* =pm setsid(2) */
  #define AUE_SETPGID             308     /* =pm setpgid(2) */
  #define AUE_FACCESSAT           309     /* =no obsolete */
  #define AUE_AUDITON_GETAMASK    310     /* =aa */
  #define AUE_AUDITON_SETAMASK    311     /* =as */
! #define AUE_PSECFLAGS           312     /* =pm psecflags */
  
  /* NOTE: update MAX_KEVENTS below if events are added. */
! #define MAX_KEVENTS             312
  
  #ifdef __cplusplus
  }
  #endif