7029 want per-process exploit mitigation features (secflags)
7030 want basic address space layout randomization (aslr)
7031 noexec_user_stack should be a secflag
7032 want a means to forbid mappings around NULL.

*** 1,7 ****
--- 1,8 ----
  nosys                   0
  rexit                   1
+ psecflags               2
  read                    3
  write                   4
  open                    5
  close                   6
  linkat                  7