allow mmap2 rather than mmap if there is one for seccomp