file capabilities: don't prevent signaling setuid root programs