make polymc firejail config more restrictive

.config/firejail/polymc.profile.cgt

@@ -1,7 +1,28 @@
 include whitelist-common.inc
+
 dbus-user filter
 dbus-user.talk com.feralinteractive.GameMode
 dbus-system none
+
+mkdir ~/.local/share/PolyMC
+mkdir ~/.config/PolyMC
 whitelist ~/.local/share/PolyMC
 whitelist ~/.config/PolyMC
+
+caps.drop all
+netfilter
+nodvd
+nogroups
+noinput
+nonewprivs
+noroot
+notv
+nou2f
+novideo
+protocol unix,inet,inet6
+
+disable-mnt
+private-dev
+private-tmp
+
 <% opt.getDeviceConf "polymc-firejail.profile" %>