add syscalls we purposely block to docs Upstream-commit: cceac7da358c3e25130ce851312c44dd4418c1b2 Component: engine