tomoyo: add missing call to cap_bprm_set_creds