7029 want per-process exploit mitigation features (secflags)
7030 want basic address space layout randomization (aslr)
7031 noexec_user_stack should be a secflag
7032 want a means to forbid mappings around NULL.

@@ -491,10 +491,11 @@
         rwlock_impl.h           \
         rwstlock.h              \
         sad.h                   \
         schedctl.h              \
         sdt.h                   \
+        secflags.h              \
         select.h                \
         sem.h                   \
         sem_impl.h              \
         sema_impl.h             \
         semaphore.h             \