func Pledge(s string) error {
	return unix.PledgePromises(s)
}
Pledge on OpenBSD lets us "promise" to only run a subset of
system calls: http://man.openbsd.org/pledge
package protect
import "golang.org/x/sys/unix"
var ProtectEnabled = true