Fix segfault from very early container crash. Whine in case capability set is defined without securebits lock.
Improve capability lock logic.