Rating 'Using seccomp to Limit the Kernel Attack Surface'