Make "is-seccomp-bpf-installed" be state per-task.

There may a race condition in the installation of the filter that could lead to bad things, but my brain is too shellshocked to think through that at the moment.  And the odds are pretty low in practice.