Don't use environment variables for passing in capabilities; /proc/*/environ contains the initial environment and the rootcap cannot be removed from there