HardenedBSD has per-application and per-jail exploit mitigation toggles. If an application violates an active exploit mitigation, the user can choose to either

HardenedBSD has per-application and per-jail exploit mitigation toggles. If an application violates an active exploit mitigation, the user can choose to either go without the application or disable the exploit mitigation for just that application.