This will allow us to run the system menu as any user. It will also enable further lockdown of the WindowServer process since it should no longer need to pledge proc and exec. :^) Note that this program is not finished yet. Work towards #1231.
