We allow the "connect" syscall in the default seccomp profile. Some tools (like systemd-cat) use connect() and shutdown() for their communication. By adding the socket "shutdown" syscall we allow these tools to work out-of-the-box.