QEMU enforces a seccomp-bpf syscall blacklist when started with -sandbox on option. We may want to enable it to get an extra layer of protection with less attack interfaces. It comes with some performance cost and we can enable /proc/sys/net/core/bpf_jit_enable to reduce the impact.