Add OFSandbox

Only OpenBSD's pledge() is supported so far.