updated pledge() with more restrictions

[bsdb0y]

pledge() can only reduce permissions. So, it is better to write it in a reducible way to add more security.

man page - pledge(2)