issue #20: no nested seccomp