Start Linux programs with only selected syscalls enabled (libseccomp-based)