You could use Seccomp filters directly, but do you really want to?