seccomp: add "seccomp" syscall