Xenocara is the OpenBSD build infrastructure for the project's customised X.Org Server that utilises a dedicated _x11 user by default to drop privileges and perform privilege separation in accordance to OpenBSDs least privilege policy. The patches for applying this rather important security protection were provided to upstream for the benefit of other Unix-like systems such as Linux, however the care to apply and maintain them has unfortunately not happened to date.