Add security.firejail

firejail requires a setuid wrapper to permit use by non-privileged users.
This patch adds a module whose sole purpose is to install such a wrapper.

This fixes #3691 though I am uncertain whether it is actually the correct thing to do
in these cases.