seccomp: create internal mode-setting function