[timed] Use oneshot to set CAP_SYS_TIME required for settimeofday