bpf: add randomized seccomp filter generated by markov chain

This generates semi-random seccomp BPF filters for trinity.
Seccomp BPF filters are generated slightly different from
networking BPF filters, since their main purpose is to
generate a whitelist for syscalls that are allowed.

Signed-off-by: Daniel Borkmann <dborkman@redhat.com>