Add support for sandboxing thumbnail creators
Allow thumbnail creators to run inside a sandbox on request. The sandbox is implemented using seccomp. Not all thumbnail creators support running inside the sandbox yet.
Credits for this go to Fabian Vogt, blame goes to me.
Edited by Alois Wohlschlager