added NOEXEC (PAGEEXEC and MPROTECT) support to secfw

github-issue: #2
Signed-off-by: Oliver Pinter <oliver.pinter@hardenedbsd.org>
Pull in PAGEEXEC and MPROTECT if they're defined in <sys/pax.h>. Fix typo.