seccomp: allow sched_setscheduler() with SCHED_IDLE policy