seccomp.2: Some reworking of Tycho's SECCOMP_RET_USER_NOTIF patch