bos_setrestricted(8) on Linux

The text 0aaa5269255a, as Debian 10 (Buster) shipped it.

place a server in restricted mode

Flags it lists