pledge() enhancement

[Luke Small]

I didn't like how rmdir(2) managed to not work when there were contents to
be deleted, so I wrote a function that would. Obviously leaving a function
like this laying around is dangerous, especially in an application server.
Can you put in pledge functionality that would reduce the ability to access
locally accessible functions?
-Luke Small