move seccomp from /proc to a prctl