bos_setrestricted(8) on Linux

The text c7d622b9d909, as Debian 11 (Bullseye) shipped it.

place a server in restricted mode

Flags it lists