Added CAP_KILL to default capabilities (required to kill own children)
Removed cap_drop() error while running with non-root privileges
merged two securityfeatures branches