+options NO_NESTED_PMAP # <no_nested_pmap>
+
+#
+# Note: MAC/AUDIT options must be set in all the bsd/conf, osfmk/conf, and
+# security/conf MASTER files.
+#
+options CONFIG_MACF # Mandatory Access Control Framework
+options CONFIG_MACF_SOCKET_SUBSET # MAC socket subest (no labels)
+#options CONFIG_MACF_SOCKET # MAC socket labels
+#options CONFIG_MACF_NET # mbuf
+#options CONFIG_MACF_DEBUG
+#options CONFIG_MACF_MACH
+options CONFIG_AUDIT # Kernel auditing
+
+# app-profiling i.e. pre-heating - off?
+options CONFIG_APP_PROFILE=0
+
+#
+# code decryption... used on i386 for DSMOS
+# must be set in all the bsd/conf and osfmk/conf MASTER files
+#
+options CONFIG_CODE_DECRYPTION
+