[libvirt] [PATCHv2 4/4] qemu: deny privilege elevation and spawn in seccomp