bos_setrestricted(8) on Linux

The text eb0ee2cfc5b7, as Debian 12 (Bookworm) shipped it.

place a server in restricted mode

Flags it lists