REVIEW: Capability should activate only in case that it has no errors

If a capability callback throws an exception capability should not activate. If exception is thrown while capability is active (during onUpdate) capability should be passivated).

Problem found during testing of https://issues.sonatype.org/browse/NEXUS-6072
https://bamboo.zion.sonatype.com/browse/NX-OSSF49