Hi Todd,
Looks like you beat me to it! skeyinit still needs pledge getpw, though:
Index: skeyinit.c
===================================================================
RCS file: /cvs/src/usr.bin/skeyinit/skeyinit.c,v
retrieving revision 1.65
diff -u -p -r1.65 skeyinit.c
--- skeyinit.c 29 Nov 2015 03:09:31 -0000 1.65
+++ skeyinit.c 29 Nov 2015 04:06:31 -0000
@@ -55,7 +55,7 @@ main(int argc, char **argv)
struct skey skey;
struct passwd *pp;
- if (pledge("stdio rpath wpath cpath fattr flock tty proc exec", NULL)
== -1)
+ if (pledge("stdio rpath wpath cpath fattr flock tty proc exec getpw",
NULL) == -1)
err(1, "pledge");
n = rmkey = hexmode = enable = 0;