Understanding SECCOMP and system calls