cap_prctl: don't set error to 0 at 'no_change'