kernel/sysctl.c: add cap_last_cap to /proc/sys/kernel