enable CONFIG_FHANDLE for systemd
enable CONFIG_SECCOMP as it might be useful