Easy start: pledge(2). Limit the system resources available to the CGI script. Keeps the external environment safe.

"stdio"

"stdio rpath cpath wpath flock fattr"