pledge() a new mitigation mechanism Theo de Raadt, OpenBSD Project