Is there some built-in software watchdog timer?  wdogctl(8) on 1.6
implies that there is; running wdogctl says that nothing is configured.
A quick grep didn't turn anything up, but it's a fairly obvious feature
to want -- am I missing something?  (Or is that a hint that I should
write such a driver?)