seccomp: Filter flag to log all actions except SECCOMP_RET_ALLOW