7029 want per-process exploit mitigation features (secflags)
7030 want basic address space layout randomization (aslr)
7031 noexec_user_stack should be a secflag
7032 want a means to forbid mappings around NULL.

@@ -1,7 +1,8 @@
 nosys                   0
 rexit                   1
+psecflags               2
 read                    3
 write                   4
 open                    5
 close                   6
 linkat                  7