Blacklist possibly-bad syscalls during diversions, instead of whitelisting known-to-be OK ones.