tsync: only one of the two siblings should fail

In two_siblings_not_under_filter, only 1 sibling should fail since the other
will be pulled into seccomp mode.

Signed-off-by: Kees Cook <keescook@chromium.org>