Split syscall restriction config option into two independent ones:
 1) Limiting DIOS processes to not use legacy syscalls (DIOS_RESTRICT_LEGACY_SYSCALLS)
 2) Limiting legacy processes to not use DIOS syscalls (DIOS_RESTRICT_DIOS_SYSCALLS)
Hack up syscall macros to check if syscall is permitted according to DIOS syscall restrictions.