Implements sandbox support using seccomp syscall filter to restrict the process. Some of the original zathura features are not available with seccomp activated. e.g. there is no network access and consequently it is not possible to open links to external resources like websites.
The feature is disabled by default and can be activated by setting the build option WITH_SECCOMP=1
This has been successfully tested with all available plugins.