syd 3.1.1

seccomp and landlock based application sandbox with support for namespaces