Right, so then sudo could conditionally pledge things based on what its ACL says. And that whitelist would apply to the program it starts. I'd understand there

Right, so then sudo could conditionally pledge things based on what its ACL says. And that whitelist would apply to the program it starts. I'd understand there being "temporary" pledges, where it gets reset on exec, but I don't understand making it by default temporary.