libcap: add patch from upstream to not require kernel headers.