Don't allow more privs.
Use seccomp bpf filter.