Merge "clatd: implement seccomp system call protection" into main