`OFSandbox` currently maps more or less 1:1 to OpenBSD's `pledge() `and `unveil()`. While those are great APIs that are easy to adopt for applications, it's unclear whether the current `OFSandbox` could be adopted to other sandboxing frameworks like seccomp-bpf or Capsicum.