Enforce seccomp policy
Enforce seccomp policy

Instead of denying access when a forbidden syscall is triggered, kill
the whole process.

This is good because it prevents silent failures when running into
issues with new/different libc implementations. This is also good,
because failures to follow the policy causes an immediate, loud KILL.

dormando/memcached,memcached/memcached,memcached/memcached,memcached/memcached,memcached/memcached,dormando/memcached,dormando/memcached,dormando/memcached,memcached/memcached,dormando/memcached