[justincormack]

I think it is missing (at least) thread sync for seccomp, used by the sandbox, maybe other securith things too.