wind: Use init --user and pledge()

Also, create the socket after dropping privileges.

apps/init.cpp

@@ -339,7 +339,7 @@ Result<int> sysinit()
     stdout = fopen("/dev/console", "w");
     stderr = fopen("/dev/console", "w");
 
-    TRY(os::Security::pledge("stdio rpath wpath cpath fattr host mount proc exec signal id", nullptr));
+    TRY(os::Security::pledge("stdio rpath wpath cpath fattr host mount proc exec signal", nullptr));
 
     mount_tmpfs();
     mount_shmfs();
@@ -356,10 +356,12 @@ Result<int> sysinit()
     if (signal(SIGTERM, sigterm_handler) == SIG_ERR) do_log("[init] failed to register handler for SIGTERM\n");
     if (signal(SIGQUIT, sigquit_handler) == SIG_ERR) do_log("[init] failed to register handler for SIGQUIT\n");
 
-    TRY(os::Security::pledge("stdio rpath wpath cpath proc exec id", nullptr));
+    TRY(os::Security::pledge("stdio rpath wpath cpath proc exec", nullptr));
 
     start_services("/etc/init");
 
+    TRY(os::Security::pledge("stdio rpath wpath proc exec", nullptr));
+
     while (1)
     {
         int status;