Feature request: Block reboot at syscall interface

We've had support for this previously. Even if a guest doesn't have userspace binaries for reboot, the syscall interface could still allow it to halt, e.g.:

```
reboot(LINUX_REBOOT_MAGIC1, LINUX_REBOOT_MAGIC2, LINUX_REBOOT_CMD_CAD_OFF) = 0
```