strace --seccomp-bpf: a look under the hood