Sandboxing Subprocesses with Seccomp

Restrict the set of system calls available to child processes to limit potential exploits.