seccomp: Add filter flag to opt-out of SSB mitigation