Kidding aside, this is a fascinating and welcome improvement to FreeBSD. It'll be interesting to see how it stacks up against seatbelt on OS X, particularly with regards to use restricting applications that *weren't* written with capabilities restriction in mind.