pie_: When I was working on the [systemd-seccomp-nspawn](https://github.com/systemd/systemd/issues/17245) issue, I couldn't understand what pcmoore meant by: 
> As you are planning on using bogus syscall numbers, you will need to be careful to only add these rules to filters containing the native arch/ABI as the libseccomp API will fail otherwise with an error

Say I want to add some rr specific syscall 1000, to what filter does this call go?
I was trying [this](https://github.com/systemd/systemd/issues/17245#issuecomment-704775723) approach that poettering explained. (`4711@x86-64`)