And to add to the submitter's rough day, Theo de Raadt has joined the conversation. https://lore.kernel.org/lkml/55960.1697566804@cvs.openbsd.or...
mseal() is a clone of mimmutable(2), but with an extremely over-complicated API based upon dubious arguments.