CONTRIB-4218 clean up capability settings

removed fixed CAP_PREVENT and CAP_PROHIBIT