cap_syslog: accept CAP_SYS_ADMIN for now