CVE-2018-3639 (powerpc)

This moves the definition of the default security feature flags
(i.e., enabled by default) closer to the security feature flags.

This can be used to restore current flags to the default flags.
Signed-off-by: Mauricio Faria de Oliveira <mauricfo@linux.vnet.ibm.com>
(cherry picked from commit e7347a86)
Signed-off-by: Michael Ellerman <mpe@ellerman.id.au>
Signed-off-by: Juerg Haefliger <juergh@canonical.com>