We should write documentation on hardening measures available in FreeBSD. One such measure would be encrypted swap. Another would be disabling information leakage: http://www.cyberciti.biz/faq/freebsd-disable-ps-sockstat-command-information-leakage/ I am opening this bug so we can collect these tips before some documentation is written. This bug should also depend on things that need to be done for hardening, such as encrypted swap.
*-fbsd is gone.