allow fsck self:capability kill;