ignore seccomp
ignore shell
private
seccomp
shell none