7029 want per-process exploit mitigation features (secflags)
7030 want basic address space layout randomization (aslr)
7031 noexec_user_stack should be a secflag
7032 want a means to forbid mappings around NULL.

*** 51,60 ****
--- 51,61 ----
  struct lwpstatus;
  struct psinfo;
  struct lwpsinfo;
  struct prcred;
  struct prpriv;
+ struct prsecflags;
  
  struct seg;
  struct regs;
  struct watched_page;
  
*** 82,91 ****
--- 83,93 ----
  #else
  extern void prgetcred(proc_t *, struct prcred *);
  #endif
  extern void prgetpriv(proc_t *, struct prpriv *);
  extern size_t prgetprivsize(void);
+ extern void prgetsecflags(proc_t *, struct prsecflags *);
  extern int  prnsegs(struct as *, int);
  extern void prexit(proc_t *);
  extern void prfree(proc_t *);
  extern void prlwpexit(kthread_t *);
  extern void prlwpfree(proc_t *, lwpent_t *);