This adds a high level test verifying that syscall filtering in combination with a simple architecture filter for the "native" architecture works fine.
