Block a user
seccomp: support Deny -> Permit -> Default Deny
Allow adding syscalls by group names
WIP: Assign syscalls into groups. Add whitelist mode (default).
WIP: Assign syscalls into groups. Add whitelist mode (default).
Inconsistencies between Landlock and non-landlock mode