seccomp: make ADD() less versatile, but more concise.