output_name is provided we need to unveil(2) this one with rwc. Additionally depending on the different combinations of if these files are passed via args or from stdin/to stdout we can also pledge(2) accordingly to the code path. OK deraadt@