sandbox: disable -sandbox if CONFIG_SECCOMP undefined