nanos-pledge

OpenBSD-style pledge syscall to restrict system operations on a Nanos unikernel