• Bump runc to v1.0.0-rc95 (this addresses CVE-2021-30465)
• Disable filtering the ptrace syscall when kernel version is above 4.8.
  This allows users to use the ptrace syscall without CAP_SYS_PTRACE when permitted by /proc/sys/kernel/yama/ptrace_scope, and enables .NET users to use the dotnet-dump diagnostic tool and the Steeltoe Heap Dump endpoint.