Using pledge() in priv-drop programs ping open raw socket + drop privs + <------ obvious place to use pledge() further initialization + main-loop