Defense-in-Depth Isn't Lego: A Study in Linux Capabilities and Seccomps Filters