Using Seccomp for System Call Filtering

Implement seccomp filters to restrict the syscall interface available to specific application binaries.