- Change call from 'unix.Pledge' to 'unix.PledgePromises' to prevent subprocesses (gpg) from being already locked (execpromises="") - New pledges needed for syslog: unix + tty