[PATCH v1 0/2] Fix misuse of security_capable()