Comment by __turbobrew__

> but nobody uses it because the API is ... hard!

OpenBSD really got it right with pledge and unveil.