seccomp_unotify.2: A cookie check is also required after reading target's memory