Busy upgrading machines now, lots of nice new things. Looking forward to checking out the new execpromises in pledge. I use pledge in all my C stuff and have added it to a few other apps. Thanks OpenBSD devs!
Of all the priviledge dropping mechanisms I have encountered, pledge seemed the most comprehensible.