Code review comment for lp:~jdstrand/snap-confine/security-review-fixes

I've completed a partial review. I still haven't gotten through all of the seccomp and test related changes. I'll complete that later this afternoon.