libseccomp

Use libseccomp
cleanup
tighter seccomp profile