i don't know OpenBSD either, but i am guessing they are similar to linux capabilities where a process can reject certain permissions, or where you can remove pe

i don't know OpenBSD either, but i am guessing they are similar to linux capabilities where a process can reject certain permissions, or where you can remove permissions before starting the process. so the goal is pretty clear. make those apps safer to reduce the risk of exploits. this goal goes through all apps written by OpenBSD devs. for apps that deal with foreign user data that is an important feature.