Lock down socket(2)

I hate libseccomp