Hooks calling snapctl are broken with just Seccomp enabled

Thanks a lot for the insights, Jamie. Your suggestion sounds great.

We really shouldn’t let seccomp kill processes like this if we have a choice of simply returning EPERM, but considering we have a fix upcoming, we can wait I suppose.