the 4.16.1->4.17 timeframe is causing calls into cairo which do shm access.
shm is not possible in a pledged process.
reported by Ralf Horstmann; for more details see
https://marc.info/?l=openbsd-ports&m=156762440931634&w=2
(missing pieces after forgotten cvs add)