execute commands restrictively on OpenBSD
git clone https://github.com/alpn/doless.git
cd doless
make && doas make install
$ doless -p "stdio rpath cpath wpath proc prot_exec tty" \
-l -A "/home/a/.node_repl_history" /usr/local/bin/node
See man page for more information.