Use SECCOMP_EXT_ACT_LSM to turn on capability mode