Second round of CR: only using safe functions for signal handler.

- unfortunately this might have to change in order to receive a meaningful message on exit, such as the syscall number that cause the issue.
Second round of CR: added Sandbox entry in tor.1.txt, added mlockall to general filter
Added syscall nr in SIGSYS handler log, added compiletime option for closing the aplication on invalid syscall