ptrace: do not audit capability check when outputing /proc/pid/stat