[Bug 1203481] AUDIT-1: libcap: consider re-introducing pam_cap for explicit opt-in