syd 3.14.1

seccomp and landlock based application sandbox with support for namespaces