seccomp: allow COMPAT sigreturn overrides