Commit Briefs
[seccomp] allow newfstatat and gettimeofday
these are required to run on arch linux (at least)
allow epoll_wait
fedora 33 issue an epoll_wait instead of pwait.
fix seccomp for the new event loop
add/remove syscalls from the BPF filter and move sandbox() after libevent initialisation
we don't need unveil "x" in listener
not a big deal, since the pledge prohibits us to exec, but nevertheless.
[seccomp] allow fcntl F_SETFD
musl does a F_SETFD in its fdopendir
allow clock_gettime and a bit of fmt
alpine on amd64 (under OpenBSD vmd) tries to do a clock_gettime. I don't know why, but it doesn't seem a problem to allow it.