only one function giving access to the pledge(2) system call:
pledge :: String -> Maybe [FilePath] -> IO ()
Help and testing by semarie@ and abieber@. Thanks!
No bump yet, because there'll be some more churn (so please wait a
little bit for other haskell commits before starting to build it).