re-reported by Jan Filipovsky.

mcbride and i think this diff looks good but do not feel like doing the
250 meter walk to go test it

from Dmitry Medvedev, ok deraadt@

ok deraadt@, millert@, krw@ - mdoc ok jmc@

ok deraadt@

from Jon Mosco;

ok miod@ krw@

ok beck@ millert@

Bring carp interfaces down at shutdown, to make a graceful exit if we're master.
ok deraadt@

ok deraadt@

ok deraadt@

ok markus@ henning@

switching to that securelevel, and the clock is off by more than
128ms, ntpd will attempt to correct by stepping the clock instead of
slewing it. So use -x in that case; from tholo

ok marc@ fgsch@

advance. From Thorsten Lockert.

No regen necessary except for hp300 MAKEDEV.8

ok beck@, input from many.

reasons for this, quite a few of them technical, and not all of them
in response to Intel's broken ia32e crud.  The gcc toolchain stays at
x86_64 for now.

ok mcbride@

ok millert@