smoketest uses libcaprights
Fix BPF for arch_prctl
Use prctl(SET_OPENAT_BENEATH) if available
Use seccomp-bpf for capability mode
Allow prctl(PR_GET_OPENAT_BENEATH) through