crosvm/seccomp/x86_64/rng_device.policy