7029 want per-process exploit mitigation features (secflags)
7030 want basic address space layout randomization (aslr)
7031 noexec_user_stack should be a secflag
7032 want a means to forbid mappings around NULL.

*** 110,119 ****
--- 110,120 ----
  static const ps_ops_t P_idle_ops = {
          .pop_pread      = Pread_idle,
          .pop_pwrite     = Pwrite_idle,
          .pop_cred       = (pop_cred_t)Pidle_int,
          .pop_priv       = Ppriv_idle,
+         .pop_secflags   = (pop_secflags_t)Pidle_int,
          .pop_psinfo     = (pop_psinfo_t)Pidle_voidp,
          .pop_platform   = (pop_platform_t)Pidle_voidp,
          .pop_uname      = (pop_uname_t)Pidle_int,
          .pop_zonename   = (pop_zonename_t)Pidle_voidp,
  #if defined(__i386) || defined(__amd64)