fix loading of private keys
Revise wording to reflect that callers should always specify (exactly)
one of MAP_PRIVATE or MAP_SHARED, as required by POSIX.  However, also
caveat that currently OpenBSD doesn't strictly enforce this behavior.
Split out mmap's compatibility flags into a separate section, so users
aren't misled into thinking they're useful on OpenBSD.