Add support for dedicated 'secretmemfd' system call.

If this system call is not implemented, retry with
memfd_create(MFD_SECRET).

Signed-off-by: Mike Rapoport <rppt@linux.ibm.com>