Also let runc:[1:CHILD] count as an entrypoint.
Also let runc:[1:CHILD] count as an entrypoint.

Handles cases where we lose system events and have incomplete state.

draios/falco,draios/falco,draios/falco,draios/falco,draios/falco,draios/falco,draios/falco,draios/falco