palaver
pub fn seal(fd: RawFd)
Makes a file descriptor read-only, which seems neccessary on some platforms to pass to fexecve and is good practise anyway