master
enable -Wall, explicitly call _dl_strsep, and zap some redundant includes ok miod@
replace the erroneous DIAGNOSTICS section with a (hopefully) accurate EXIT STATUS one;
ldd can pledge "stdio rpath proc exec prot_exec". We can later bifurbicate at the dlopen vs execve split, dropping either "proc" or "prot_exec". ok gnezdo