security: filesystem capabilities: fix CAP_SETPCAP handling