Merge "configstore: sandbox with seccomp filter" into oc-mr1-dev