http://cypherpunk-handbook.i2p/articles/openbsd.html
They communicate through imsg(3) , not shared memory;
privileged work stays in the parent, most workers are unprivileged and
chrooted, and the queue has a separate account. pledge(2) restricts each worker's allowed operations, while re-execution gives
child processes memory layouts independent of the initial parent.