Filter syscall parameters in seccomp

[lberrymage]

Currently the seccomp sandboxing implementation only filters syscalls themselves with no regard to the parameters passed to them. We should filter for specific syscall parameters where possible to further tighten the sandbox.