safer when using smaller curves like 381

maybe this can be a solution for #214

fix #225

fix #226

seccomp isolation now supported in cli
various cleanups removing broken configs

now branch is skipped on any fault (use AND not OR)

close #161

fix #220

fix #219

various improvements to the finite state machine
introduced endif to mark end of conditional branching blocks
still needs to be polished, but passing all tests