seccomp: re-validate a redirected syscall against outer filters

From: Cong Wang cwang@multikernel.io Stacked filters compose by taking the most restrictive verdict over one evaluation of a single seccomp_data, assuming the syscall they voted on is the syscall t