add test for sandbox

This commit adds a test for strict sandbox mode to find new requirements for syscalls faster.

As the test execution requires the timer_* syscalls, I added a testflag to the strict filter function.

I am not happy with this solution as it does not seem worth the additional checks for just two syscalls.

Requesting feedback.