https://vivianvoss.net/blog/capsicum-vs-seccomp