pax_segvguard ported from NetBSD...