PLEDGE_EXEC
nid.ni_pledge = PLEDGE_EXEC;
[SYS_execve] = PLEDGE_EXEC,
{ "exec", PLEDGE_EXEC },
PLEDGE_CPATH | PLEDGE_DPATH | PLEDGE_EXEC |
if ((nip & PLEDGE_EXEC) && (ple & PLEDGE_EXEC))
{ PLEDGE_EXEC, "exec" },