7029 want per-process exploit mitigation features (secflags)
7030 want basic address space layout randomization (aslr)
7031 noexec_user_stack should be a secflag
7032 want a means to forbid mappings around NULL.

*** 300,309 ****
--- 300,310 ----
                  proc.1                          \
                  prof.1                          \
                  profiles.1                      \
                  projects.1                      \
                  ps.1                            \
+                 psecflags.1                     \
                  ptree.1                         \
                  pvs.1                           \
                  pwd.1                           \
                  ranlib.1                        \
                  rcapstat.1                      \