run: consider seccomp-bpf switches or deprecating run about sninit HOT 1 CLOSED

Linux is a kernel, and those tools are only there if whoever builds the system decides so.
It's not that difficult to build a system without standalone cgexec or unshare or setcap for instance, at which point having an option to use run instead may be beneficial.

Adding seccomp is a neat idea, but maybe not as a part of run. The idea behind run is to merge several smaller common tools to avoid excessive chaining. At some point, it's no longer excessive — I would probably prefer seccomp as a separate tool because of all the parsing involved.

from sninit.