Don't hard-code path to scap scripts; rely on $PATH instead

We already do that for 'sudo', for example.

Change-Id: I40a891b1cb53b900aa1d5045be6028d9952cbc8e