adding CAP_EXTENDED_SECURITY support in a hurry last week. forgot to