logrotate.conf: use native capability, ignore postrotate scripts