At the moment, we need to disable seccomp filtering when using a host crypto device. If not, ioctls run on that device crash the VM. The proper solution is to white list the particular ioctls to the cryptodev device.