do not rely on sys/capability.h for capset()