start testing capabilities metatables
remove si_ namespacing
initial version of seccomp signal catcher, but does not return code
attempt to mask seccomp signal but failing
whitelist calls that luajit may use for seccomp tests