syd 3.11.4

seccomp and landlock based application sandbox with support for namespaces