HardenedBSD-11-CURRENT-v40

[freebsd] linuxulator Implement AT_SECURE properly. FreeBSD-SA-16:10.linux (in the default HARDENEDBSD kernel config this is disabled)
[hardenedbsd] HBSD: Harden KLD-related syscalls
[hardenedbsd] HBSD: Default jemalloc's lg_chunk to 16 from 21.
[hardenedbsd] HBSD: fix integer overflow in iconv kernel module
[hardenedbsd] HBSD: bump __HardenedBSD_version to 40 after HBSD API changes
[hardenedbsd] HBSD: add public API to query the running kernel's __HardenedBSD_version
[hardenedbsd] HBSD: major flags related type cleanup
[freebsd] MFV r294491: ntp 4.2.8p6. FreeBSD-SA-16:09.ntp
[freebsd] Upgrade to OpenSSH 7.1p2.
[freebsd] loader - Fix EFI UFS caching
[hardenedbsd] HBSD: change the default stack protection in amd64 case
[hardenedbsd] HBSD: Fix etcupdate integration
[freebsd] Connect the ZFS boot environment menu to the UEFI loader
[freebsd] Add EFI ZFS boot support