seccomp: don't kill process for resource control syscalls