Matthew Dillon has added some sysctls that can help secure your machine; the commit message for both contains a more in-depth explanation.