turn off a bunch of syscalls