Leveraging eBPF to enhance sandboxing of WebAssembly runtimes