Move the seccomp filter from a header into a separate translation unit.
Flatten out the maze of #defines.