Runtime SeccompProfilePath

[xibz]

• runtime should not block setting host name with unconfined seccomp and SYS_ADMIN
• should support seccomp unconfined on the container
• should support seccomp default which is unconfined on the container
• runtime should support setting hostname with docker/default seccomp profile and SYS_ADMIN
• runtime should support an seccomp profile that blocks setting hostname with SYS_ADMIN
• runtime should block sethostname with docker/default seccomp profile and no extra caps
• should support seccomp localhost/profile on the container
• runtime should not support a custom seccomp profile without using localhost/ as a prefix
• runtime should ignore a seccomp profile that blocks setting hostname when privileged
• should support seccomp docker/default on the container