[PATCH bpf] bpf: Gate dynptr API behind CAP_BPF