Read the previous comment: everything works as designed but there is no reasonable way to test this in our build environment. At best we could probably create a test package that contains a binary which is installed with some capabilities and fails when the capabilities are missing.