Patched sandbox policy to quit sandboxing upon SYS_exit_group()

This patch may hopefully resolve a very rare issue when `libsandbox` returns `IE` (internal error) at the termination of sandboxed programs. The patch also unified the mixed use of `machine` v.s. `arch` and `SandboxAction` v.s. `self.{_KILL_RF,_CONT}`.