add the flags and special cases to seccomp sanitise