Add full support for NX, and VM protections.
Remove the bringup hack, this fixes launchd zombies, but now in internal launchd logs I see vm_allocate(mach_task_self(), (vm_address_t *)&req, mz, flags) == KERN_SUCCESS) failing.