seccomp: allow mode setting across threads