Seccomp filtering for setgroups

i guess that will be covered via …