remove gcc function prologue from syscall wrappers
don't destroy values we declared as constants
we need to wrap strdup, too
fix bugs in proxy callbacks
explicitly refuse open() calls

Python calls open() when it encounters an unknown identifier.
python callback spec works in sandbox