Merge pull request #4 from kees/tsync

tsync: only one of the two siblings should fail
tsync: unlock mutex on failure

Testing the there-is-no-seccomp case showed the children need to
unlock on fatal errors.

Signed-off-by: Kees Cook <keescook@chromium.org>