In rS360900 we were mistaken about where the default sec=sys came from. I was under the impression mountd ensured the default security flavor, but that is clearly not the case.
Set the default security flavor in vfs_export if none is given, and remove the workaround for oexport compat.
Reported by: npn
Sponsored by: iXsystems, Inc.