PATH_PFCTL
execvp(PATH_PFCTL, argv);
if (unveil(PATH_PFCTL, "x") == -1) {
execvp(PATH_PFCTL, pargv);
syslog_r(LOG_ERR, &sdata, "can't exec %s:%m", PATH_PFCTL);
syslog_r(LOG_ERR, &sdata, "%s returned status %d", PATH_PFCTL,
syslog_r(LOG_ERR, &sdata, "%s died on signal %d", PATH_PFCTL,
execvp(PATH_PFCTL, pargv);
warn("exec of %s failed", PATH_PFCTL);