PAX ASLR/SEGVGUARD: Add ability to set pax flags on a per-binary basis