seccomp: merge into sandbox