seccomp: split mode setting routines