Version 1.2.1

First security update in 3 years!

Switch Docker container to run as unprivileged user (nobody), switch seccomp to DENY by default, deny clone as we are running in an environment without cgroups.