allow lmkd self:capability sys_ptrace;