personally I wish the OS would allow syscall filtering per user