added NOEXEC (PAGEEXEC and MPROTECT) support to secfw

github-issue: #2
Signed-off-by: Oliver Pinter <oliver.pinter@hardenedbsd.org>