For the most part, pledge(2), privilege separation, privilege dropping, and file-system jails protect our environment from our applications.

Can we bring this technique into our program logic?