Support seccomp and NaCl sandboxes

This makes the sandbox-ng branch compatible with the current NaCl sandbox.
The sandboxMode config option can be set to 'seccomp' or 'nacl'. The default is 'nacl'.