If anyone was holding off on developing http-serving Go apps on 5.9 or
recent -current because of a lack of syscall.Pledge to go with your
syscall.Chroot and syscall.Setuid, I'm pleased to present a library that
provides native-Go access to pledge(2). It is located at
https://github.com/ylih/extrasys and its Go package import path is
"ylh.io/extrasys". Now you can privilege-drop your Go apps to your
heart's content.