I did not realize that. Given that, I was incorrect when I said that the author (or anyone) could easily use seccomp MODE_STRICT. Capsicum may still be easy to

I did not realize that. Given that, I was incorrect when I said that the author (or anyone) could easily use seccomp MODE_STRICT. Capsicum may still be easy to use. And seccomp-bpf is not that complex either.