netfoil's optional seccomp sandboxing was not applied

### Summary The optional flag `--filter-system-calls` was not applied even if specified. ### Details This is a defense

历史摘要 · 未重新核验 · GitHub Advisory