Phase 1: Initial seccomp support Upstream-commit: 87a614ed55f2a9076d8150f846b0d27fe60095a8 Component: engine