Fix pledge to not use pass-by-reference