The text a48bb208fcd2, as FreeBSD 11.2-RELEASE shipped it.
Check if in a capability mode sandbox
cap_sandboxed(3) on FreeBSD now