unveil
int unveil(const char *, const char *);
if (socket_name != NULL && unveil(socket_name, "c") == -1) {
if (*socket_dir != '\0' && unveil(socket_dir, "c") == -1) {
if (unveil("/", "r") == -1)
if (unveil(ccp, "x") == -1)
if (unveil(ccp, "x") == -1)
if (unveil(ccp, "x") == -1)
if (unveil("/dev/null", "rw") == -1)