keep the SYS_PTRACE cap

Fixes #6800