syd 3.3.3

seccomp and landlock based application sandbox with support for namespaces