[anthk]

Also, pledge is everywhere. Seppconf, not. And SeLinux just in few distros.

Pledge is instrinsic. You have it right from the beggining with C and Perl. And it's straightforward to use.