sandbox-linux: call seccomp_release, remove unnecessary iteration

sandbox/sandbox-linux.h

@@ -15,6 +15,6 @@ class SandboxLinux : public Sandbox
   private:
 	bool isolateNamespaces(std::vector<std::string> fsPaths);
 	bool seccomp_blacklist(std::initializer_list<int> syscalls);
-	bool bindMountPaths(std::string target_root, std::initializer_list<std::string> paths);
+	bool bindMountPaths(std::string target_root, const std::vector<std::string> &paths);
 };
 #endif