bpf: expose bpf_{g,s}etsockopt to lsm cgroup