syd 3.15.8

seccomp and landlock based application sandbox with support for namespaces