simplify no_syscalls_enabled