GSOC seccomp stage 2

Review and merge phase 2 of seccomp capabilities filtering.

This version should implement much more restrictive filtering, mostly based on parameter filtering of the syscalls.

Remote: https://github.com/cristiantoader/tor-gsoc-capabilities Branch: gsoc-cap-stage2

Trac:
Username: ctoader