seccomp syscall and cleanups

This is a stack of changes, some cleanups, some to convert to the new syscall interfaces, etc.