https://sysdig.com/blog/selinux-seccomp-falco-technical-discussion/